
    <html>
    <head>
        <title>系统信息收集-20250102_201927</title>
        <style>
            body {
                font-family: 'Segoe UI', Tahoma, Geneva, Verdana, sans-serif;
                background-color: #121212;
                color: #E0E0E0;
                margin: 0;
                padding: 0;
                display: flex;
                justify-content: flex-start;
                align-items: flex-start;
                height: 100vh;
                overflow: hidden;
                box-sizing: border-box;
                width: 100%;
            }
            h1, h2, h4, h6 {
                text-align: center;
                color: #ff9800;
            }
            a {
            /*    去除下划线*/
                text-decoration: none;
                color: #bfff00;
                transition: color 0.3s ease;
                font-weight: bold;
                font-size: 1.1em;
                margin: 0 10px;
            }


            .container {
                display: flex;
                width: 100%;
                background-color: #1E1E1E;
                border-radius: 12px;
                padding: 20px;
                box-shadow: 0 8px 20px rgba(0, 0, 0, 0.7);
                overflow-y: auto;
                height: calc(100vh - 40px);
            }
            .sidebar {
                width: 250px;
                background-color: #333;
                padding: 20px;
                border-radius: 10px;
                margin-right: 20px;
                box-shadow: 0 4px 12px rgba(0, 0, 0, 0.6);
                position: sticky;
                top: 20px;
            }
            .sidebar h3 {
                color: #ff9800;
                text-transform: uppercase;
                margin-bottom: 20px;
                font-size: 1.3em;
            }
            .sidebar a {
                display: block;
                color: #bbb;
                padding: 10px;
                text-decoration: none;
                border-radius: 5px;
                margin-bottom: 10px;
                transition: background-color 0.3s ease;
            }
            .sidebar a:hover {
                background-color: #444;
            }
            /* Main Content Area Styles */
            .main-content {
                flex-grow: 1;
                width: 100%;
            }
            .section {
                margin-bottom: 30px;
            }
            .section h2 {
                margin-top: 20px;
                font-size: 1.5em;
                text-transform: uppercase;
                border-bottom: 2px solid #ff9800;
                padding-bottom: 10px;
            }
            .system-info p {
                font-size: 1.1em;
                color: #bbb;
                line-height: 1.8;
            }

            table {
                width: 100%;
                border-collapse: collapse;
                margin-top: 20px;
                font-size: 1em;
                color: #E0E0E0;
            }
            th, td {
                padding: 12px;
                text-align: left;
                max-width: 500px;
                border: 1px solid #333;
                word-break: break-word; 
            }
            th {
                background-color: #333;
                font-weight: bold;
            }
            tr:nth-child(even) {
                background-color: #2A2A2A;
            }
            tr:nth-child(odd) {
                background-color: #1A1A1A;
            }
            td[colspan="7"] {
                text-align: center;
                color: #ff9800;
            }

            @media screen and (max-width: 868px) {
                .container {
                    flex-direction: column;
                    width: 100%;
                    padding: 10px;
                }
                .sidebar {
                    width: 100%;
                    margin-right: 0;
                    margin-bottom: 20px;
                }
                table {
                    font-size: 0.9em;
                }
                .system-info p {
                    font-size: 1em;
                }
            }
        </style>
    </head>
    <body>
        <div class="container">
            <!-- Sidebar Navigation -->
            <div class="sidebar">
                <h3>目录</h3>
                <a href="#system-info">系统信息</a>
                <a href="#network-analysis">网络分析</a>
                <a href="#process-analysis">进程分析</a>
                <a href="#service-analysis">服务分析</a>
                <a href="#user-analysis">用户分析</a>
                <a href="#env-variables">环境变量</a>
                <a href="#scheduled-tasks">计划任务</a>
                <a href="#recent_files">最近访问</a>
                <a href="#network_adapters">网络适配器</a>
                
            </div>

            <!-- Main Content -->
            <div class="main-content">
                <h1>系统信息收集报告 - 20250102_201927</h1>
                <h4>Windows系统信息收集工具 v0.0.1 By <a href="https://gitee.com/XcNGG/sys-any">xcngio</a></h4>
                <br>
                <div id="system-info" class="system-info">
                    <h2>系统信息</h2>
                    <p><strong>主机名</strong>: XcNgIO-FireBat</p>
                    <p><strong>主机时间</strong>: 2025-01-02 20:19:26</p>
                    <p><strong>主机系统</strong>: Windows 10 10.0.22621 ('64bit', 'WindowsPE')</p>
                    <p><strong>CPU信息</strong>: AMD64 Family 25 Model 117 Stepping 2, AuthenticAMD | 核心数量: 16</p>
                    <p><strong>CPU占用</strong>: 0.7%%</p>
                    <p><strong>内存剩余</strong>: 18.73GB/63.19GB(29.6%)</p>
                    <p><strong>持续运行</strong>: 0:24:48 小时</p>
                    <p><strong>磁盘占用</strong>:</p>
                    <ul>
        <li>C:\: 55.2%</li><li>D:\: 26.1%</li><li>E:\: 89.5%</li><li>F:\: 12.8%</li><li>G:\: 73.6%</li><li>H:\: 2.7%</li></ul></div><div id='network-analysis' class='section'><h2>网络分析</h2><table><tr><th>IP地址</th><th>次数</th><th>归属地</th><th>PID</th><th>进程路径</th></tr><tr><td>0.0.0.0</td><td>103</td><td>Unknown</td><td>1824</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>3.3.3.1</td><td>7</td><td>Unknown</td><td>4</td><td></td></tr><tr><td>34.49.50.137</td><td>4</td><td>Unknown</td><td>11880</td><td>D:\JetBrains\PyCharm\bin\pycharm64.exe</td></tr><tr><td>119.23.151.122</td><td>1</td><td>Unknown</td><td>14172</td><td>C:\Users\Administrator\AppData\Local\Programs\utools\uTools.exe</td></tr><tr><td>120.52.183.190</td><td>1</td><td>Unknown</td><td>16644</td><td>D:\Kingsoft\WPS Office\12.1.0.19302\office6\wpscloudsvr.exe</td></tr><tr><td>101.71.164.194</td><td>6</td><td>Unknown</td><td>16644</td><td>D:\Kingsoft\WPS Office\12.1.0.19302\office6\wpscloudsvr.exe</td></tr><tr><td>119.176.25.138</td><td>2</td><td>Unknown</td><td>16644</td><td>D:\Kingsoft\WPS Office\12.1.0.19302\office6\wpscloudsvr.exe</td></tr><tr><td>1.92.89.108</td><td>2</td><td>Unknown</td><td>16644</td><td>D:\Kingsoft\WPS Office\12.1.0.19302\office6\wpscloudsvr.exe</td></tr><tr><td>119.176.25.145</td><td>1</td><td>Unknown</td><td>16644</td><td>D:\Kingsoft\WPS Office\12.1.0.19302\office6\wpscloudsvr.exe</td></tr><tr><td>153.3.237.162</td><td>1</td><td>Unknown</td><td>11880</td><td>D:\JetBrains\PyCharm\bin\pycharm64.exe</td></tr><tr><td>2.19.198.66</td><td>1</td><td>Unknown</td><td>12360</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>211.99.97.60</td><td>27</td><td>Unknown</td><td>20568</td><td>D:\Clash for Windows\resources\static\files\win\x64\clash-win64.exe</td></tr><tr><td>117.50.186.17</td><td>6</td><td>Unknown</td><td>11880</td><td>D:\JetBrains\PyCharm\bin\pycharm64.exe</td></tr><tr><td>220.197.30.67</td><td>1</td><td>Unknown</td><td>19852</td><td>D:\NetEase\CloudMusic\cloudmusic.exe</td></tr><tr><td>124.236.26.172</td><td>2</td><td>Unknown</td><td>0</td><td>Unknown</td></tr><tr><td>101.126.24.87</td><td>2</td><td>Unknown</td><td>0</td><td>Unknown</td></tr><tr><td>39.107.193.14</td><td>1</td><td>Unknown</td><td>0</td><td>Unknown</td></tr><tr><td>123.6.28.41</td><td>1</td><td>Unknown</td><td>0</td><td>Unknown</td></tr><tr><td>101.201.58.236</td><td>4</td><td>Unknown</td><td>16644</td><td>D:\Kingsoft\WPS Office\12.1.0.19302\office6\wpscloudsvr.exe</td></tr><tr><td>39.105.32.31</td><td>1</td><td>Unknown</td><td>16644</td><td>D:\Kingsoft\WPS Office\12.1.0.19302\office6\wpscloudsvr.exe</td></tr><tr><td>120.46.196.156</td><td>1</td><td>Unknown</td><td>16644</td><td>D:\Kingsoft\WPS Office\12.1.0.19302\office6\wpscloudsvr.exe</td></tr><tr><td>123.57.223.58</td><td>1</td><td>Unknown</td><td>16644</td><td>D:\Kingsoft\WPS Office\12.1.0.19302\office6\wpscloudsvr.exe</td></tr><tr><td>123.249.36.234</td><td>1</td><td>Unknown</td><td>16644</td><td>D:\Kingsoft\WPS Office\12.1.0.19302\office6\wpscloudsvr.exe</td></tr><tr><td>180.184.51.196</td><td>4</td><td>Unknown</td><td>16644</td><td>D:\Kingsoft\WPS Office\12.1.0.19302\office6\wpscloudsvr.exe</td></tr><tr><td>114.116.252.200</td><td>1</td><td>Unknown</td><td>16644</td><td>D:\Kingsoft\WPS Office\12.1.0.19302\office6\wpscloudsvr.exe</td></tr><tr><td>116.205.106.69</td><td>1</td><td>Unknown</td><td>16644</td><td>D:\Kingsoft\WPS Office\12.1.0.19302\office6\wpscloudsvr.exe</td></tr><tr><td>101.126.4.197</td><td>1</td><td>Unknown</td><td>16644</td><td>D:\Kingsoft\WPS Office\12.1.0.19302\office6\wpscloudsvr.exe</td></tr><tr><td>120.46.51.104</td><td>1</td><td>Unknown</td><td>16644</td><td>D:\Kingsoft\WPS Office\12.1.0.19302\office6\wpscloudsvr.exe</td></tr><tr><td>159.27.21.167</td><td>1</td><td>Unknown</td><td>8088</td><td>C:\Program Files\WindowsApps\Microsoft.MicrosoftPCManager_3.14.14.0_x64__8wekyb3d8bbwe\PCManager\MSPCManagerService.exe</td></tr><tr><td>220.197.34.89</td><td>1</td><td>Unknown</td><td>19852</td><td>D:\NetEase\CloudMusic\cloudmusic.exe</td></tr><tr><td>220.197.34.90</td><td>1</td><td>Unknown</td><td>19852</td><td>D:\NetEase\CloudMusic\cloudmusic.exe</td></tr><tr><td>220.197.32.230</td><td>1</td><td>Unknown</td><td>19852</td><td>D:\NetEase\CloudMusic\cloudmusic.exe</td></tr><tr><td>20.197.71.89</td><td>1</td><td>Unknown</td><td>6148</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>157.255.209.247</td><td>1</td><td>Unknown</td><td>15936</td><td>D:\Tencent\WeChat\WeChat.exe</td></tr><tr><td>157.255.209.167</td><td>1</td><td>Unknown</td><td>15936</td><td>D:\Tencent\WeChat\WeChat.exe</td></tr><tr><td>142.250.107.188</td><td>1</td><td>Unknown</td><td>12360</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>101.69.205.133</td><td>1</td><td>Unknown</td><td>11672</td><td>C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe</td></tr><tr><td>114.250.63.33</td><td>1</td><td>Unknown</td><td>12360</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr></table></div><div id='process-analysis' class='section'><h2>进程分析</h2><table><tr><th>进程ID</th><th>进程名称</th><th>状态</th><th>运行用户</th><th>进程路径</th></tr><tr><td>0</td><td>System Idle Process</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>无法访问</td></tr><tr><td>4</td><td>System</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td></td></tr><tr><td>212</td><td>Registry</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>Registry</td></tr><tr><td>804</td><td>smss.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\smss.exe</td></tr><tr><td>1148</td><td>csrss.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\csrss.exe</td></tr><tr><td>1340</td><td>wininit.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\wininit.exe</td></tr><tr><td>1348</td><td>csrss.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\csrss.exe</td></tr><tr><td>1352</td><td>svchost.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>1388</td><td>OpenConsole.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>D:\JetBrains\PyCharm\lib\pty4j\win\x86-64\OpenConsole.exe</td></tr><tr><td>1412</td><td>svchost.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>1424</td><td>services.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\services.exe</td></tr><tr><td>1452</td><td>winlogon.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\winlogon.exe</td></tr><tr><td>1512</td><td>lsass.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\lsass.exe</td></tr><tr><td>1652</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>1680</td><td>fontdrvhost.exe</td><td>running</td><td>Font Driver Host\UMFD-0</td><td>C:\Windows\System32\fontdrvhost.exe</td></tr><tr><td>1688</td><td>fontdrvhost.exe</td><td>running</td><td>Font Driver Host\UMFD-1</td><td>C:\Windows\System32\fontdrvhost.exe</td></tr><tr><td>1696</td><td>WUDFHost.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>C:\Windows\System32\WUDFHost.exe</td></tr><tr><td>1776</td><td>svchost.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>1824</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\NETWORK SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>1852</td><td>conhost.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\System32\conhost.exe</td></tr><tr><td>1868</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>1968</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>1984</td><td>conhost.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\System32\conhost.exe</td></tr><tr><td>1992</td><td>sihost.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\System32\sihost.exe</td></tr><tr><td>2008</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>2012</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>2024</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>2028</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>2040</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>2084</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>2092</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>2192</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>2252</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>2308</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\NETWORK SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>2316</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>2336</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>2528</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>2648</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>2680</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>2688</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\NETWORK SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>2704</td><td>smartscreen.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\System32\smartscreen.exe</td></tr><tr><td>2852</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>3036</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>3144</td><td>dwm.exe</td><td>running</td><td>Window Manager\DWM-1</td><td>C:\Windows\System32\dwm.exe</td></tr><tr><td>3188</td><td>dasHost.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>C:\Windows\System32\dasHost.exe</td></tr><tr><td>3332</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>3336</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>3452</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>3524</td><td>amdfendrsr.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_987f8cede005f427\amdfendrsr.exe</td></tr><tr><td>3532</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>3540</td><td>atiesrxx.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\DriverStore\FileRepository\u0407412.inf_amd64_101d3d4e34955a9f\B407018\atiesrxx.exe</td></tr><tr><td>3576</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>3592</td><td>HipsTray.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>D:\Huorong\Sysdiag\bin\HipsTray.exe</td></tr><tr><td>3756</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>3800</td><td>AUEPMaster.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\AMD\Performance Profile Client\AUEPMaster.exe</td></tr><tr><td>3840</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>3956</td><td>python.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>D:\Compiler\Python3.7\python.exe</td></tr><tr><td>3960</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>4136</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>4144</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>4152</td><td>atieclxx.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\DriverStore\FileRepository\u0407412.inf_amd64_101d3d4e34955a9f\B407018\atieclxx.exe</td></tr><tr><td>4192</td><td>WeChatAppEx.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Users\Administrator\AppData\Roaming\Tencent\WeChat\XPlugin\Plugins\RadiumWMPF\11581\extracted\runtime\WeChatAppEx.exe</td></tr><tr><td>4208</td><td>Clash for Windows.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>D:\Clash for Windows\Clash for Windows.exe</td></tr><tr><td>4224</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>4232</td><td>PopBlock.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>D:\Huorong\Sysdiag\bin\PopBlock.exe</td></tr><tr><td>4252</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>4260</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>4284</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>4368</td><td>wsctrlsvc.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>D:\Huorong\Sysdiag\bin\wsctrlsvc.exe</td></tr><tr><td>4400</td><td>dasHost.exe</td><td>running</td><td>NT AUTHORITY\NETWORK SERVICE</td><td>C:\Windows\System32\dasHost.exe</td></tr><tr><td>4500</td><td>cloudmusic.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>D:\NetEase\CloudMusic\cloudmusic.exe</td></tr><tr><td>4540</td><td>conhost.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\System32\conhost.exe</td></tr><tr><td>4568</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>4572</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>4660</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>4672</td><td>codegeex-ls-win.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Users\Administrator\AppData\Roaming\JetBrains\PyCharm2024.1\plugins\codegeex-intellij-extension\codegeex-ls\bin\codegeex-ls-win.exe</td></tr><tr><td>4684</td><td>Clash for Windows.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>D:\Clash for Windows\Clash for Windows.exe</td></tr><tr><td>4748</td><td>pycharm64.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>D:\JetBrains\PyCharm\bin\pycharm64.exe</td></tr><tr><td>4756</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>4848</td><td>cloudmusic.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>D:\NetEase\CloudMusic\cloudmusic.exe</td></tr><tr><td>5064</td><td>Everything.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>D:\Everything\Everything.exe</td></tr><tr><td>5160</td><td>uTools.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Users\Administrator\AppData\Local\Programs\utools\uTools.exe</td></tr><tr><td>5176</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>5216</td><td>audiodg.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>C:\Windows\System32\audiodg.exe</td></tr><tr><td>5228</td><td>spoolsv.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\spoolsv.exe</td></tr><tr><td>5296</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>5340</td><td>RtkAudUService64.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_d3fd20216d5b72ae\RtkAudUService64.exe</td></tr><tr><td>5344</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\NETWORK SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>5356</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>5644</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>5760</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>5796</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>5880</td><td>sensor-bridge.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>F:\Acunetix\24.10.241106172\data\acusensor\sensor-bridge.exe</td></tr><tr><td>6012</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\NETWORK SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>6036</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>6044</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>6052</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>6060</td><td>MacTray.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>D:\MacType\MacTray.exe</td></tr><tr><td>6072</td><td>MSOfficePLUSService.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Program Files\Microsoft OfficePLUS\3.6.0.54557\service\MSOfficePLUSService.exe</td></tr><tr><td>6080</td><td>Everything.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>D:\Everything\Everything.exe</td></tr><tr><td>6088</td><td>RSKService.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Program Files\RSK\RSKService.exe</td></tr><tr><td>6096</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>6108</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>6116</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>6136</td><td>supervisor.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>F:\Acunetix\supervisor.exe</td></tr><tr><td>6148</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>6164</td><td>pg_ctl.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>F:\Acunetix\pg\bin\pg_ctl.exe</td></tr><tr><td>6172</td><td>vmnetdhcp.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\SysWOW64\vmnetdhcp.exe</td></tr><tr><td>6188</td><td>mysqld.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>H:\sskit-client\sskit-client-v1.1.0\env\mysql\bin\mysqld.exe</td></tr><tr><td>6196</td><td>vmnat.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\SysWOW64\vmnat.exe</td></tr><tr><td>6216</td><td>mysqld.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>H:\sskit-client\sskit-client-v1.1.0\env\mysql\bin\mysqld.exe</td></tr><tr><td>6236</td><td>OfficeClickToRun.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Program Files\Common Files\microsoft shared\ClickToRun\OfficeClickToRun.exe</td></tr><tr><td>6312</td><td>MpDefenderCoreService.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpDefenderCoreService.exe</td></tr><tr><td>6320</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>6328</td><td>MsMpEng.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MsMpEng.exe</td></tr><tr><td>6440</td><td>comate-win-x64.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Users\Administrator\AppData\Roaming\JetBrains\PyCharm2024.1\plugins\comate-intellij-plugin\comate-agent\bin\comate-win-x64.exe</td></tr><tr><td>6480</td><td>pycharm64.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>D:\JetBrains\PyCharm\bin\pycharm64.exe</td></tr><tr><td>6500</td><td>conhost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\conhost.exe</td></tr><tr><td>6564</td><td>vmware-authd.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>D:\VMware Workstation\vmware-authd.exe</td></tr><tr><td>6604</td><td>vmware-usbarbitrator64.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe</td></tr><tr><td>6664</td><td>PhoneExperienceHost.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\WindowsApps\Microsoft.YourPhone_1.24112.110.0_x64__8wekyb3d8bbwe\PhoneExperienceHost.exe</td></tr><tr><td>6784</td><td>invicti-agent.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>F:\Acunetix\24.10.241106172\zerodisco\invicti-agent.exe</td></tr><tr><td>6852</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>6900</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>7136</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>7176</td><td>integrations.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>F:\Acunetix\24.10.241106172\integrations\integrations.exe</td></tr><tr><td>7200</td><td>conhost.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\System32\conhost.exe</td></tr><tr><td>7468</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>7476</td><td>conhost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\conhost.exe</td></tr><tr><td>7560</td><td>conhost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\conhost.exe</td></tr><tr><td>7668</td><td>nats-server.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>F:\Acunetix\broker\nats-server.exe</td></tr><tr><td>7760</td><td>postgres.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>F:\Acunetix\pg\bin\postgres.exe</td></tr><tr><td>7812</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>7896</td><td>conhost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\conhost.exe</td></tr><tr><td>7984</td><td>WmiPrvSE.exe</td><td>running</td><td>NT AUTHORITY\NETWORK SERVICE</td><td>C:\Windows\System32\wbem\WmiPrvSE.exe</td></tr><tr><td>8064</td><td>postgres.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>F:\Acunetix\pg\bin\postgres.exe</td></tr><tr><td>8072</td><td>conhost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\conhost.exe</td></tr><tr><td>8088</td><td>MSPCManagerService.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Program Files\WindowsApps\Microsoft.MicrosoftPCManager_3.14.14.0_x64__8wekyb3d8bbwe\PCManager\MSPCManagerService.exe</td></tr><tr><td>8108</td><td>Invicti.ApiHub.Host.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>F:\Acunetix\24.10.241106172\apihub\Invicti.ApiHub.Host.exe</td></tr><tr><td>8112</td><td>opsrv.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>F:\Acunetix\24.10.241106172\opsrv.exe</td></tr><tr><td>8328</td><td>conhost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\conhost.exe</td></tr><tr><td>8344</td><td>svchost.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>8396</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>8408</td><td>postgres.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>F:\Acunetix\pg\bin\postgres.exe</td></tr><tr><td>8484</td><td>WmiPrvSE.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\wbem\WmiPrvSE.exe</td></tr><tr><td>8608</td><td>coodesker-x64.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>D:\Coodesker\coodesker-x64.exe</td></tr><tr><td>8652</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>8660</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\NETWORK SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>8672</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>9200</td><td>integrations.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>F:\Acunetix\24.10.241106172\integrations\integrations.exe</td></tr><tr><td>9228</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>9232</td><td>explorer.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\explorer.exe</td></tr><tr><td>9268</td><td>unsecapp.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\wbem\unsecapp.exe</td></tr><tr><td>9280</td><td>postgres.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>F:\Acunetix\pg\bin\postgres.exe</td></tr><tr><td>9296</td><td>conhost.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>C:\Windows\System32\conhost.exe</td></tr><tr><td>9440</td><td>mt64agnt.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>D:\MacType\mt64agnt.exe</td></tr><tr><td>9504</td><td>postgres.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>F:\Acunetix\pg\bin\postgres.exe</td></tr><tr><td>9520</td><td>postgres.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>F:\Acunetix\pg\bin\postgres.exe</td></tr><tr><td>9588</td><td>postgres.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>F:\Acunetix\pg\bin\postgres.exe</td></tr><tr><td>9612</td><td>postgres.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>F:\Acunetix\pg\bin\postgres.exe</td></tr><tr><td>9620</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>9700</td><td>postgres.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>F:\Acunetix\pg\bin\postgres.exe</td></tr><tr><td>9728</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>9776</td><td>postgres.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>F:\Acunetix\pg\bin\postgres.exe</td></tr><tr><td>9940</td><td>postgres.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>F:\Acunetix\pg\bin\postgres.exe</td></tr><tr><td>10032</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>10048</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>10092</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>10228</td><td>node-win-x64.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Users\Administrator\.comate-engine\bin\node-win-x64.exe</td></tr><tr><td>10304</td><td>svchost.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>10312</td><td>svchost.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>10360</td><td>taskhostw.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\System32\taskhostw.exe</td></tr><tr><td>10440</td><td>powershell.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\System32\WindowsPowerShell\v1.0\powershell.exe</td></tr><tr><td>10616</td><td>WeChatAppEx.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Users\Administrator\AppData\Roaming\Tencent\WeChat\XPlugin\Plugins\RadiumWMPF\11581\extracted\runtime\WeChatAppEx.exe</td></tr><tr><td>10860</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>10924</td><td>python.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>E:\Code\PythonProject\sys-any-dev\venv\py37\Scripts\python.exe</td></tr><tr><td>11108</td><td>RSK.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\RSK\RSK.exe</td></tr><tr><td>11204</td><td>unsecapp.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\System32\wbem\unsecapp.exe</td></tr><tr><td>11296</td><td>RuntimeBroker.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\System32\RuntimeBroker.exe</td></tr><tr><td>11420</td><td>conhost.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\System32\conhost.exe</td></tr><tr><td>11640</td><td>node-win-x64.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Users\Administrator\.comate-engine\bin\node-win-x64.exe</td></tr><tr><td>11664</td><td>svchost.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>11672</td><td>SearchHost.exe</td><td>stopped</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\SearchHost.exe</td></tr><tr><td>11680</td><td>StartMenuExperienceHost.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\SystemApps\Microsoft.Windows.StartMenuExperienceHost_cw5n1h2txyewy\StartMenuExperienceHost.exe</td></tr><tr><td>11772</td><td>conhost.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\System32\conhost.exe</td></tr><tr><td>11880</td><td>pycharm64.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>D:\JetBrains\PyCharm\bin\pycharm64.exe</td></tr><tr><td>11904</td><td>RuntimeBroker.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\System32\RuntimeBroker.exe</td></tr><tr><td>12096</td><td>Widgets.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\WindowsApps\MicrosoftWindows.Client.WebExperience_524.30502.30.0_x64__cw5n1h2txyewy\Dashboard\Widgets.exe</td></tr><tr><td>12124</td><td>pycharm64.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>D:\JetBrains\PyCharm\bin\pycharm64.exe</td></tr><tr><td>12176</td><td>WidgetService.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\WindowsApps\Microsoft.WidgetsPlatformRuntime_1.6.1.0_x64__8wekyb3d8bbwe\WidgetService\WidgetService.exe</td></tr><tr><td>12208</td><td>LocationNotificationWindows.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\System32\LocationNotificationWindows.exe</td></tr><tr><td>12360</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>12372</td><td>dllhost.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\System32\dllhost.exe</td></tr><tr><td>12376</td><td>uTools.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Users\Administrator\AppData\Local\Programs\utools\uTools.exe</td></tr><tr><td>12628</td><td>node-win-x64.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Users\Administrator\.comate-engine\bin\node-win-x64.exe</td></tr><tr><td>12640</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>13140</td><td>WeChatAppEx.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Users\Administrator\AppData\Roaming\Tencent\WeChat\XPlugin\Plugins\RadiumWMPF\11581\extracted\runtime\WeChatAppEx.exe</td></tr><tr><td>13268</td><td>uTools.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Users\Administrator\AppData\Local\Programs\utools\uTools.exe</td></tr><tr><td>13412</td><td>postgres.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>F:\Acunetix\pg\bin\postgres.exe</td></tr><tr><td>13428</td><td>ctfmon.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\System32\ctfmon.exe</td></tr><tr><td>13556</td><td>vmware-tray.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>D:\VMware Workstation\vmware-tray.exe</td></tr><tr><td>13588</td><td>SearchIndexer.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\SearchIndexer.exe</td></tr><tr><td>13616</td><td>Clash for Windows.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>D:\Clash for Windows\Clash for Windows.exe</td></tr><tr><td>13828</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>13848</td><td>ChsIME.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\System32\InputMethod\CHS\ChsIME.exe</td></tr><tr><td>13908</td><td>TextInputHost.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\SystemApps\MicrosoftWindows.Client.CBS_cw5n1h2txyewy\TextInputHost.exe</td></tr><tr><td>13936</td><td>wps.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>D:\Kingsoft\WPS Office\12.1.0.19302\office6\wps.exe</td></tr><tr><td>14080</td><td>conhost.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\System32\conhost.exe</td></tr><tr><td>14172</td><td>uTools.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Users\Administrator\AppData\Local\Programs\utools\uTools.exe</td></tr><tr><td>14304</td><td>memreduct.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>D:\MemReduct\64\memreduct.exe</td></tr><tr><td>14372</td><td>WeChatAppEx.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Users\Administrator\AppData\Roaming\Tencent\WeChat\XPlugin\Plugins\RadiumWMPF\11581\extracted\runtime\WeChatAppEx.exe</td></tr><tr><td>14404</td><td>postgres.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>F:\Acunetix\pg\bin\postgres.exe</td></tr><tr><td>14828</td><td>postgres.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>F:\Acunetix\pg\bin\postgres.exe</td></tr><tr><td>14848</td><td>AMDRSSrcExt.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\AMD\CNext\CNext\AMDRSSrcExt.exe</td></tr><tr><td>14880</td><td>amdow.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\AMD\CNext\CNext\amdow.exe</td></tr><tr><td>14972</td><td>svchost.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>15008</td><td>fsnotifier.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>D:\JetBrains\PyCharm\bin\fsnotifier.exe</td></tr><tr><td>15092</td><td>conhost.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\System32\conhost.exe</td></tr><tr><td>15196</td><td>pycharm64.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>D:\JetBrains\PyCharm\bin\pycharm64.exe</td></tr><tr><td>15516</td><td>mmcrashpad_handler64.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>D:\Tencent\WeChat\[3.9.12.17]\mmcrashpad_handler64.exe</td></tr><tr><td>15816</td><td>msedgewebview2.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files (x86)\Microsoft\EdgeWebView\Application\131.0.2903.112\msedgewebview2.exe</td></tr><tr><td>15936</td><td>WeChat.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>D:\Tencent\WeChat\WeChat.exe</td></tr><tr><td>15984</td><td>msedgewebview2.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files (x86)\Microsoft\EdgeWebView\Application\131.0.2903.112\msedgewebview2.exe</td></tr><tr><td>16044</td><td>WeChatAppEx.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Users\Administrator\AppData\Roaming\Tencent\WeChat\XPlugin\Plugins\RadiumWMPF\11581\extracted\runtime\WeChatAppEx.exe</td></tr><tr><td>16200</td><td>msedgewebview2.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files (x86)\Microsoft\EdgeWebView\Application\131.0.2903.112\msedgewebview2.exe</td></tr><tr><td>16364</td><td>msedgewebview2.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files (x86)\Microsoft\EdgeWebView\Application\131.0.2903.112\msedgewebview2.exe</td></tr><tr><td>16404</td><td>ShellExperienceHost.exe</td><td>stopped</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\SystemApps\ShellExperienceHost_cw5n1h2txyewy\ShellExperienceHost.exe</td></tr><tr><td>16480</td><td>WeChatAppEx.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Users\Administrator\AppData\Roaming\Tencent\WeChat\XPlugin\Plugins\RadiumWMPF\11581\extracted\runtime\WeChatAppEx.exe</td></tr><tr><td>16512</td><td>cncmd.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\AMD\CNext\CNext\cncmd.exe</td></tr><tr><td>16640</td><td>WeChatAppEx.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Users\Administrator\AppData\Roaming\Tencent\WeChat\XPlugin\Plugins\RadiumWMPF\11581\extracted\runtime\WeChatAppEx.exe</td></tr><tr><td>16644</td><td>wpscloudsvr.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>D:\Kingsoft\WPS Office\12.1.0.19302\office6\wpscloudsvr.exe</td></tr><tr><td>16708</td><td>uTools.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Users\Administrator\AppData\Local\Programs\utools\uTools.exe</td></tr><tr><td>16824</td><td>WeChatPlayer.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Users\Administrator\AppData\Roaming\Tencent\WeChat\XPlugin\Plugins\ThumbPlayer\4073\extracted\WeChatPlayer.exe</td></tr><tr><td>16896</td><td>WeChatUtility.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Users\Administrator\AppData\Roaming\Tencent\WeChat\XPlugin\Plugins\WeChatUtility\8091\extracted\WeChatUtility.exe</td></tr><tr><td>16976</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>16996</td><td>WeChatOCR.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Users\Administrator\AppData\Roaming\Tencent\WeChat\XPlugin\Plugins\WeChatOCR\7079\extracted\WeChatOCR.exe</td></tr><tr><td>17320</td><td>WeChatAppEx.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Users\Administrator\AppData\Roaming\Tencent\WeChat\XPlugin\Plugins\RadiumWMPF\11581\extracted\runtime\WeChatAppEx.exe</td></tr><tr><td>17392</td><td>WeChatAppEx.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Users\Administrator\AppData\Roaming\Tencent\WeChat\XPlugin\Plugins\RadiumWMPF\11581\extracted\runtime\WeChatAppEx.exe</td></tr><tr><td>17424</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>17432</td><td>cmd.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\System32\cmd.exe</td></tr><tr><td>17464</td><td>conhost.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\System32\conhost.exe</td></tr><tr><td>17492</td><td>AMDRSServ.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\AMD\CNext\CNext\AMDRSServ.exe</td></tr><tr><td>17520</td><td>uTools.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Users\Administrator\AppData\Local\Programs\utools\uTools.exe</td></tr><tr><td>17716</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>17728</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>17812</td><td>RadeonSoftware.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\AMD\CNext\CNext\RadeonSoftware.exe</td></tr><tr><td>17856</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>17960</td><td>conhost.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\System32\conhost.exe</td></tr><tr><td>18148</td><td>msedgewebview2.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files (x86)\Microsoft\EdgeWebView\Application\131.0.2903.112\msedgewebview2.exe</td></tr><tr><td>18300</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>18388</td><td>PushNotificationsLongRunningTask.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\WindowsApps\MicrosoftCorporationII.WinAppRuntime.Singleton_6000.318.2304.0_x64__8wekyb3d8bbwe\PushNotificationsLongRunningTask.exe</td></tr><tr><td>18612</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>18620</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>18628</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>18720</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>18768</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>18796</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>18804</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>18812</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>18828</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>19092</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>19308</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>19408</td><td>Clash for Windows.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>D:\Clash for Windows\Clash for Windows.exe</td></tr><tr><td>19480</td><td>node-win-x64.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Users\Administrator\.comate-engine\bin\node-win-x64.exe</td></tr><tr><td>19596</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>19852</td><td>cloudmusic.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>D:\NetEase\CloudMusic\cloudmusic.exe</td></tr><tr><td>20136</td><td>node-win-x64.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Users\Administrator\.comate-engine\bin\node-win-x64.exe</td></tr><tr><td>20220</td><td>AUEPDU.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Program Files\AMD\Performance Profile Client\AUEPDU.exe</td></tr><tr><td>20260</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\NETWORK SERVICE</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>20372</td><td>msedgewebview2.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files (x86)\Microsoft\EdgeWebView\Application\131.0.2903.112\msedgewebview2.exe</td></tr><tr><td>20412</td><td>cloudmusic_reporter.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>D:\NetEase\CloudMusic\cloudmusic_reporter.exe</td></tr><tr><td>20452</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>20568</td><td>clash-win64.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>D:\Clash for Windows\resources\static\files\win\x64\clash-win64.exe</td></tr><tr><td>20640</td><td>conhost.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Windows\System32\conhost.exe</td></tr><tr><td>20644</td><td>node-win-x64.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Users\Administrator\.comate-engine\bin\node-win-x64.exe</td></tr><tr><td>21048</td><td>postgres.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>F:\Acunetix\pg\bin\postgres.exe</td></tr><tr><td>21176</td><td>svchost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\svchost.exe</td></tr><tr><td>21252</td><td>pycharm64.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>D:\JetBrains\PyCharm\bin\pycharm64.exe</td></tr><tr><td>21276</td><td>HipsDaemon.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>D:\Huorong\Sysdiag\bin\HipsDaemon.exe</td></tr><tr><td>22384</td><td>SearchProtocolHost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\SearchProtocolHost.exe</td></tr><tr><td>22800</td><td>SearchFilterHost.exe</td><td>running</td><td>NT AUTHORITY\SYSTEM</td><td>C:\Windows\System32\SearchFilterHost.exe</td></tr><tr><td>22844</td><td>postgres.exe</td><td>running</td><td>NT AUTHORITY\LOCAL SERVICE</td><td>F:\Acunetix\pg\bin\postgres.exe</td></tr><tr><td>23092</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>23136</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>23144</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>23152</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>23160</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>23168</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>23176</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>23224</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr><tr><td>23232</td><td>chrome.exe</td><td>running</td><td>XCNGIO-FIREBAT\Administrator</td><td>C:\Program Files\Google\Chrome\Application\chrome.exe</td></tr></table></div><div id='service-analysis' class='section'><h2>服务分析</h2><table><tr><th>服务名称</th><th>显示名称</th><th>状态</th><th>路径</th></tr><tr><td>acunetix</td><td>Acunetix Supervisor</td><td>Running</td><td>F:\Acunetix\supervisor.exe svc run</td></tr><tr><td>Acunetix Database</td><td>Acunetix Database</td><td>Running</td><td>"F:\Acunetix\pg\bin\pg_ctl.exe" runservice -N "Acunetix Database" -D "F:\Acunetix\Public\db" -e "Acunetix" -w</td></tr><tr><td>AJRouter</td><td>AllJoyn Router Service</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p</td></tr><tr><td>ALG</td><td>Application Layer Gateway Service</td><td>Stopped</td><td>C:\windows\System32\alg.exe</td></tr><tr><td>AMD Crash Defender Service</td><td>AMD Crash Defender Service</td><td>Running</td><td>C:\windows\System32\DriverStore\FileRepository\amdfendr.inf_amd64_987f8cede005f427\amdfendrsr.exe</td></tr><tr><td>AMD External Events Utility</td><td>AMD External Events Utility</td><td>Running</td><td>C:\windows\System32\DriverStore\FileRepository\u0407412.inf_amd64_101d3d4e34955a9f\B407018\atiesrxx.exe</td></tr><tr><td>amdpmfservice</td><td>AMD PMF Service</td><td>Stopped</td><td>C:\windows\System32\amdpmfservice.exe</td></tr><tr><td>AppIDSvc</td><td>Application Identity</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p</td></tr><tr><td>Appinfo</td><td>Application Information</td><td>Running</td><td>C:\windows\system32\svchost.exe -k netsvcs -p</td></tr><tr><td>AppMgmt</td><td>Application Management</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k netsvcs -p</td></tr><tr><td>AppReadiness</td><td>App Readiness</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k AppReadiness -p</td></tr><tr><td>AppVClient</td><td>Microsoft App-V Client</td><td>Stopped</td><td>C:\windows\system32\AppVClient.exe</td></tr><tr><td>AppXSvc</td><td>AppX Deployment Service (AppXSVC)</td><td>Running</td><td>C:\windows\system32\svchost.exe -k wsappx -p</td></tr><tr><td>AssignedAccessManagerSvc</td><td>AssignedAccessManager 服务</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k AssignedAccessManagerSvc</td></tr><tr><td>AudioEndpointBuilder</td><td>Windows Audio Endpoint Builder</td><td>Running</td><td>C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>Audiosrv</td><td>Windows Audio</td><td>Running</td><td>C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p</td></tr><tr><td>AUEPLauncher</td><td>AMD User Experience Program Data Uploader</td><td>Running</td><td>"C:\Program Files\AMD\CIM\..\Performance Profile Client\AUEPDU.exe"</td></tr><tr><td>autotimesvc</td><td>手机网络时间</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k autoTimeSvc</td></tr><tr><td>AxInstSV</td><td>ActiveX Installer (AxInstSV)</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k AxInstSVGroup</td></tr><tr><td>BaiduNetdiskUtility</td><td>BaiduNetdiskUtility</td><td>Stopped</td><td>"D:\BaiduNetdisk\YunUtilityService.exe"</td></tr><tr><td>BDESVC</td><td>BitLocker Drive Encryption Service</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k netsvcs -p</td></tr><tr><td>BFE</td><td>Base Filtering Engine</td><td>Running</td><td>C:\windows\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p</td></tr><tr><td>BITS</td><td>Background Intelligent Transfer Service</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k netsvcs -p</td></tr><tr><td>BrokerInfrastructure</td><td>Background Tasks Infrastructure Service</td><td>Running</td><td>C:\windows\system32\svchost.exe -k DcomLaunch -p</td></tr><tr><td>Browser</td><td>Computer Browser</td><td>Running</td><td>C:\windows\System32\svchost.exe -k netsvcs -p</td></tr><tr><td>BTAGService</td><td>蓝牙音频网关服务</td><td>Running</td><td>C:\windows\system32\svchost.exe -k LocalServiceNetworkRestricted</td></tr><tr><td>BthAvctpSvc</td><td>AVCTP 服务</td><td>Running</td><td>C:\windows\system32\svchost.exe -k LocalService -p</td></tr><tr><td>bthserv</td><td>蓝牙支持服务</td><td>Running</td><td>C:\windows\system32\svchost.exe -k LocalService -p</td></tr><tr><td>camsvc</td><td>功能访问管理器服务</td><td>Running</td><td>C:\windows\system32\svchost.exe -k osprivacy -p</td></tr><tr><td>CDPSvc</td><td>连接设备平台服务</td><td>Running</td><td>C:\windows\system32\svchost.exe -k LocalService -p</td></tr><tr><td>CertPropSvc</td><td>Certificate Propagation</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k netsvcs</td></tr><tr><td>ClickToRunSvc</td><td>Microsoft Office Click-to-Run Service</td><td>Running</td><td>"C:\Program Files\Common Files\Microsoft Shared\ClickToRun\OfficeClickToRun.exe" /service</td></tr><tr><td>ClipSVC</td><td>Client License Service (ClipSVC)</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k wsappx -p</td></tr><tr><td>cloudidsvc</td><td>Microsoft 云标识服务</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k CloudIdServiceGroup -p</td></tr><tr><td>COMSysApp</td><td>COM+ System Application</td><td>Stopped</td><td>C:\windows\system32\dllhost.exe /Processid:{02D4B3F1-FD88-11D1-960D-00805FC79235}</td></tr><tr><td>CoreMessagingRegistrar</td><td>CoreMessaging</td><td>Running</td><td>C:\windows\system32\svchost.exe -k LocalServiceNoNetwork -p</td></tr><tr><td>CryptSvc</td><td>Cryptographic Services</td><td>Running</td><td>C:\windows\system32\svchost.exe -k NetworkService -p</td></tr><tr><td>CscService</td><td>Offline Files</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>DcomLaunch</td><td>DCOM Server Process Launcher</td><td>Running</td><td>C:\windows\system32\svchost.exe -k DcomLaunch -p</td></tr><tr><td>dcsvc</td><td>已声明的配置(DC)服务</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k netsvcs -p</td></tr><tr><td>defragsvc</td><td>Optimize drives</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k defragsvc</td></tr><tr><td>DeviceAssociationService</td><td>Device Association Service</td><td>Running</td><td>C:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>DeviceInstall</td><td>Device Install Service</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k DcomLaunch -p</td></tr><tr><td>DevQueryBroker</td><td>DevQuery Background Discovery Broker</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>Dhcp</td><td>DHCP Client</td><td>Running</td><td>C:\windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p</td></tr><tr><td>diagnosticshub.standardcollector.service</td><td>Microsoft (R) 诊断中心标准收集器服务</td><td>Stopped</td><td>C:\windows\system32\DiagSvcs\DiagnosticsHub.StandardCollector.Service.exe</td></tr><tr><td>diagsvc</td><td>Diagnostic Execution Service</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k diagnostics</td></tr><tr><td>DiagTrack</td><td>Connected User Experiences and Telemetry</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k utcsvc -p</td></tr><tr><td>DialogBlockingService</td><td>DialogBlockingService</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k DialogBlockingService</td></tr><tr><td>DispBrokerDesktopSvc</td><td>显示策略服务</td><td>Running</td><td>C:\windows\system32\svchost.exe -k LocalService -p</td></tr><tr><td>DisplayEnhancementService</td><td>显示增强服务</td><td>Running</td><td>C:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>DmEnrollmentSvc</td><td>设备管理注册服务</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k netsvcs -p</td></tr><tr><td>dmwappushservice</td><td>设备管理无线应用程序协议 (WAP) 推送消息路由服务</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k netsvcs -p</td></tr><tr><td>Dnscache</td><td>DNS Client</td><td>Running</td><td>C:\windows\system32\svchost.exe -k NetworkService -p</td></tr><tr><td>DoSvc</td><td>Delivery Optimization</td><td>Running</td><td>C:\windows\System32\svchost.exe -k NetworkService -p</td></tr><tr><td>dot3svc</td><td>Wired AutoConfig</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>DPS</td><td>Diagnostic Policy Service</td><td>Running</td><td>C:\windows\System32\svchost.exe -k LocalServiceNoNetwork -p</td></tr><tr><td>DsmSvc</td><td>Device Setup Manager</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k netsvcs -p</td></tr><tr><td>DsSvc</td><td>Data Sharing Service</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>DusmSvc</td><td>数据使用量</td><td>Running</td><td>C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p</td></tr><tr><td>EapHost</td><td>Extensible Authentication Protocol</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k netsvcs -p</td></tr><tr><td>edgeupdate</td><td>Microsoft Edge Update Service (edgeupdate)</td><td>Stopped</td><td>"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /svc</td></tr><tr><td>edgeupdatem</td><td>Microsoft Edge Update Service (edgeupdatem)</td><td>Stopped</td><td>"C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe" /medsvc</td></tr><tr><td>EFS</td><td>Encrypting File System (EFS)</td><td>Running</td><td>C:\windows\System32\lsass.exe</td></tr><tr><td>embeddedmode</td><td>嵌入模式</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>EntAppSvc</td><td>Enterprise App Management Service</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k appmodel -p</td></tr><tr><td>EventLog</td><td>Windows Event Log</td><td>Running</td><td>C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p</td></tr><tr><td>EventSystem</td><td>COM+ Event System</td><td>Running</td><td>C:\windows\system32\svchost.exe -k LocalService -p</td></tr><tr><td>Everything</td><td>Everything</td><td>Running</td><td>"D:\Everything\Everything.exe" -svc</td></tr><tr><td>fdPHost</td><td>Function Discovery Provider Host</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalService -p</td></tr><tr><td>FDResPub</td><td>Function Discovery Resource Publication</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p</td></tr><tr><td>fhsvc</td><td>File History Service</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>FontCache</td><td>Windows Font Cache Service</td><td>Running</td><td>C:\windows\system32\svchost.exe -k LocalService -p</td></tr><tr><td>FontCache3.0.0.0</td><td>Windows Presentation Foundation Font Cache 3.0.0.0</td><td>Stopped</td><td>C:\windows\Microsoft.Net\Framework64\v3.0\WPF\PresentationFontCache.exe</td></tr><tr><td>FrameServer</td><td>Windows Camera Frame Server</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k Camera</td></tr><tr><td>FrameServerMonitor</td><td>Windows Camera Frame Server Monitor</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k CameraMonitor</td></tr><tr><td>GameInputSvc</td><td>GameInput Service</td><td>Stopped</td><td>C:\windows\System32\GameInputSvc.exe</td></tr><tr><td>GoogleChromeElevationService</td><td>Google Chrome Elevation Service (GoogleChromeElevationService)</td><td>Stopped</td><td>"C:\Program Files\Google\Chrome\Application\131.0.6778.205\elevation_service.exe"</td></tr><tr><td>GoogleUpdaterInternalService132.0.6833.0</td><td>Google 更新程序内部服务 (GoogleUpdaterInternalService132.0.6833.0)</td><td>Stopped</td><td>"C:\Program Files (x86)\Google\GoogleUpdater\132.0.6833.0\updater.exe" --system --windows-service --service=update-internal</td></tr><tr><td>GoogleUpdaterService132.0.6833.0</td><td>Google 更新程序服务 (GoogleUpdaterService132.0.6833.0)</td><td>Stopped</td><td>"C:\Program Files (x86)\Google\GoogleUpdater\132.0.6833.0\updater.exe" --system --windows-service --service=update</td></tr><tr><td>gpsvc</td><td>Group Policy Client</td><td>Running</td><td>C:\windows\system32\svchost.exe -k netsvcs -p</td></tr><tr><td>GraphicsPerfSvc</td><td>GraphicsPerfSvc</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k GraphicsPerfSvcGroup</td></tr><tr><td>hidserv</td><td>Human Interface Device Service</td><td>Running</td><td>C:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>HipsDaemon</td><td>Huorong Internet Security Daemon</td><td>Running</td><td>"D:\Huorong\Sysdiag\bin\HipsDaemon.exe" -sHipsDaemon</td></tr><tr><td>HRWSCCtrl</td><td>Huorong Windows Security Center</td><td>Running</td><td>"D:\Huorong\Sysdiag\bin\wsctrlsvc.exe" /svc_run</td></tr><tr><td>HvHost</td><td>HV 主机服务</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>icssvc</td><td>Windows 移动热点服务</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p</td></tr><tr><td>IKEEXT</td><td>IKE and AuthIP IPsec Keying Modules</td><td>Running</td><td>C:\windows\system32\svchost.exe -k netsvcs -p</td></tr><tr><td>InstallService</td><td>Microsoft Store 安装服务</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k netsvcs -p</td></tr><tr><td>InventorySvc</td><td>清单和兼容性评估服务</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k InvSvcGroup -p</td></tr><tr><td>iphlpsvc</td><td>IP Helper</td><td>Running</td><td>C:\windows\System32\svchost.exe -k NetSvcs -p</td></tr><tr><td>IpxlatCfgSvc</td><td>IP 转换配置服务</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>KeyIso</td><td>CNG Key Isolation</td><td>Running</td><td>C:\windows\system32\lsass.exe</td></tr><tr><td>KtmRm</td><td>KtmRm for Distributed Transaction Coordinator</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k NetworkServiceAndNoImpersonation -p</td></tr><tr><td>LanmanServer</td><td>Server</td><td>Running</td><td>C:\windows\system32\svchost.exe -k netsvcs -p</td></tr><tr><td>LanmanWorkstation</td><td>Workstation</td><td>Running</td><td>C:\windows\System32\svchost.exe -k NetworkService -p</td></tr><tr><td>lfsvc</td><td>Geolocation Service</td><td>Running</td><td>C:\windows\system32\svchost.exe -k netsvcs -p</td></tr><tr><td>LicenseManager</td><td>Windows 许可证管理器服务</td><td>Running</td><td>C:\windows\System32\svchost.exe -k LocalService -p</td></tr><tr><td>lltdsvc</td><td>Link-Layer Topology Discovery Mapper</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k LocalService -p</td></tr><tr><td>lmhosts</td><td>TCP/IP NetBIOS Helper</td><td>Running</td><td>C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p</td></tr><tr><td>LSM</td><td>Local Session Manager</td><td>Running</td><td>C:\windows\system32\svchost.exe -k DcomLaunch -p</td></tr><tr><td>LxpSvc</td><td>语言体验服务</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k netsvcs</td></tr><tr><td>MacType</td><td>MacType Service</td><td>Running</td><td>D:\MacType\MacTray.exe -service</td></tr><tr><td>MapsBroker</td><td>Downloaded Maps Manager</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k NetworkService -p</td></tr><tr><td>McpManagementService</td><td>McpManagementService</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k McpManagementServiceGroup</td></tr><tr><td>MDCoreSvc</td><td>Microsoft Defender Core 服务</td><td>Running</td><td>"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MpDefenderCoreService.exe"</td></tr><tr><td>MicrosoftEdgeElevationService</td><td>Microsoft Edge Elevation Service (MicrosoftEdgeElevationService)</td><td>Stopped</td><td>"C:\Program Files (x86)\Microsoft\Edge\Application\131.0.2903.112\elevation_service.exe"</td></tr><tr><td>MixedRealityOpenXRSvc</td><td>Windows Mixed Reality OpenXR 服务</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>MozillaMaintenance</td><td>Mozilla Maintenance Service</td><td>Stopped</td><td>"C:\Program Files (x86)\Mozilla Maintenance Service\maintenanceservice.exe"</td></tr><tr><td>mpssvc</td><td>Windows Defender Firewall</td><td>Running</td><td>C:\windows\system32\svchost.exe -k LocalServiceNoNetworkFirewall -p</td></tr><tr><td>MSDTC</td><td>Distributed Transaction Coordinator</td><td>Stopped</td><td>C:\windows\System32\msdtc.exe</td></tr><tr><td>MSiSCSI</td><td>Microsoft iSCSI Initiator Service</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k netsvcs -p</td></tr><tr><td>msiserver</td><td>Windows Installer</td><td>Stopped</td><td>C:\windows\system32\msiexec.exe /V</td></tr><tr><td>MsKeyboardFilter</td><td>Microsoft 键盘筛选器</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k netsvcs -p</td></tr><tr><td>MySQL_sskit</td><td>MySQL_sskit</td><td>Running</td><td>H:\sskit-client\sskit-client-v1.1.0\env\mysql\bin\mysqld --defaults-file=C:\Users\Administrator\AppData\Roaming\\MysqlData\my.ini MySQL_sskit</td></tr><tr><td>NaturalAuthentication</td><td>自然身份验证</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k netsvcs -p</td></tr><tr><td>NcaSvc</td><td>Network Connectivity Assistant</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k NetSvcs -p</td></tr><tr><td>NcbService</td><td>Network Connection Broker</td><td>Running</td><td>C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>NcdAutoSetup</td><td>Network Connected Devices Auto-Setup</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k LocalServiceNoNetwork -p</td></tr><tr><td>Netlogon</td><td>Netlogon</td><td>Stopped</td><td>C:\windows\system32\lsass.exe</td></tr><tr><td>Netman</td><td>Network Connections</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>netprofm</td><td>Network List Service</td><td>Running</td><td>C:\windows\System32\svchost.exe -k netprofm -p</td></tr><tr><td>NetSetupSvc</td><td>Network Setup Service</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k netsvcs -p</td></tr><tr><td>NetTcpPortSharing</td><td>Net.Tcp Port Sharing Service</td><td>Stopped</td><td>C:\windows\Microsoft.NET\Framework64\v4.0.30319\SMSvcHost.exe</td></tr><tr><td>NgcCtnrSvc</td><td>Microsoft Passport Container</td><td>Running</td><td>C:\windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p</td></tr><tr><td>NgcSvc</td><td>Microsoft Passport</td><td>Running</td><td>C:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>NlaSvc</td><td>网络位置感知</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k netprofm -p</td></tr><tr><td>nsi</td><td>Network Store Interface Service</td><td>Running</td><td>C:\windows\system32\svchost.exe -k LocalService -p</td></tr><tr><td>OfficePLUS Service</td><td>OfficePLUS Service</td><td>Running</td><td>C:\Program Files\Microsoft OfficePLUS\3.6.0.54557\service\MSOfficePLUSService.exe</td></tr><tr><td>p2pimsvc</td><td>Peer Networking Identity Manager</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k LocalServicePeerNet</td></tr><tr><td>p2psvc</td><td>Peer Networking Grouping</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k LocalServicePeerNet</td></tr><tr><td>PcaSvc</td><td>Program Compatibility Assistant Service</td><td>Running</td><td>C:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>PCManager Service Store</td><td>MSPCManager Service (Store)</td><td>Running</td><td>"C:\Program Files\WindowsApps\Microsoft.MicrosoftPCManager_3.14.14.0_x64__8wekyb3d8bbwe\PCManager\MSPCManagerService.exe"</td></tr><tr><td>PeerDistSvc</td><td>BranchCache</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k PeerDist</td></tr><tr><td>perceptionsimulation</td><td>Windows 感知模拟服务</td><td>Stopped</td><td>C:\windows\system32\PerceptionSimulation\PerceptionSimulationService.exe</td></tr><tr><td>PerfHost</td><td>Performance Counter DLL Host</td><td>Stopped</td><td>C:\windows\SysWow64\perfhost.exe</td></tr><tr><td>PhoneSvc</td><td>Phone Service</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalService -p</td></tr><tr><td>phpStudySrv</td><td>phpstudy服务</td><td>Stopped</td><td>D:\phpstudy_pro\COM\phpStudyServer.exe -SCM</td></tr><tr><td>pla</td><td>Performance Logs & Alerts</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k LocalServiceNoNetwork -p</td></tr><tr><td>PlugPlay</td><td>Plug and Play</td><td>Running</td><td>C:\windows\system32\svchost.exe -k DcomLaunch -p</td></tr><tr><td>PNRPAutoReg</td><td>PNRP Machine Name Publication Service</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k LocalServicePeerNet</td></tr><tr><td>PNRPsvc</td><td>Peer Name Resolution Protocol</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k LocalServicePeerNet</td></tr><tr><td>PolicyAgent</td><td>IPsec Policy Agent</td><td>Running</td><td>C:\windows\system32\svchost.exe -k NetworkServiceNetworkRestricted -p</td></tr><tr><td>Power</td><td>Power</td><td>Running</td><td>C:\windows\system32\svchost.exe -k DcomLaunch -p</td></tr><tr><td>PrintNotify</td><td>Printer Extensions and Notifications</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k print</td></tr><tr><td>ProfSvc</td><td>User Profile Service</td><td>Running</td><td>C:\windows\system32\svchost.exe -k UserProfileService -p</td></tr><tr><td>PushToInstall</td><td>Windows PushToInstall 服务</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k netsvcs -p</td></tr><tr><td>QuarkUpdaterInternalService1.0.0.11</td><td>QuarkUpdater InternalService 1.0.0.11 (QuarkUpdaterInternalService1.0.0.11)</td><td>Stopped</td><td>"C:\Program Files\QuarkUpdater\QuarkUpdater\1.0.0.11\updater.exe" --system --windows-service --service=update-internal --enable-logging --vmodule=*/components/winhttp/*=1,*/components/update_client/*=2,*/chrome/updater/*=2,*/chrome/updater/quark/*=2</td></tr><tr><td>QuarkUpdaterService1.0.0.11</td><td>QuarkUpdater Service 1.0.0.11 (QuarkUpdaterService1.0.0.11)</td><td>Stopped</td><td>"C:\Program Files\QuarkUpdater\QuarkUpdater\1.0.0.11\updater.exe" --system --windows-service --service=update --enable-logging --vmodule=*/components/winhttp/*=1,*/components/update_client/*=2,*/chrome/updater/*=2,*/chrome/updater/quark/*=2</td></tr><tr><td>QWAVE</td><td>Quality Windows Audio Video Experience</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p</td></tr><tr><td>RasAuto</td><td>Remote Access Auto Connection Manager</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k netsvcs -p</td></tr><tr><td>RasMan</td><td>Remote Access Connection Manager</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k netsvcs</td></tr><tr><td>RemoteAccess</td><td>Routing and Remote Access</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k netsvcs</td></tr><tr><td>RemoteRegistry</td><td>Remote Registry</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k localService -p</td></tr><tr><td>RetailDemo</td><td>零售演示服务</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k rdxgroup</td></tr><tr><td>RmSvc</td><td>无线电管理服务</td><td>Running</td><td>C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted</td></tr><tr><td>rpcapd</td><td>Remote Packet Capture Protocol v.0 (experimental)</td><td>Stopped</td><td>"C:\Program Files (x86)\WinPcap\rpcapd.exe" -d -f "C:\Program Files (x86)\WinPcap\rpcapd.ini"</td></tr><tr><td>RpcEptMapper</td><td>RPC Endpoint Mapper</td><td>Running</td><td>C:\windows\system32\svchost.exe -k RPCSS -p</td></tr><tr><td>RpcLocator</td><td>Remote Procedure Call (RPC) Locator</td><td>Stopped</td><td>C:\windows\system32\locator.exe</td></tr><tr><td>RpcSs</td><td>Remote Procedure Call (RPC)</td><td>Running</td><td>C:\windows\system32\svchost.exe -k rpcss -p</td></tr><tr><td>RskService</td><td>RSK Service</td><td>Running</td><td>C:\Program Files\RSK\RSKService.exe</td></tr><tr><td>RtkAudioUniversalService</td><td>Realtek Audio Universal Service</td><td>Running</td><td>"C:\windows\System32\DriverStore\FileRepository\realtekservice.inf_amd64_d3fd20216d5b72ae\RtkAudUService64.exe"</td></tr><tr><td>SamSs</td><td>Security Accounts Manager</td><td>Running</td><td>C:\windows\system32\lsass.exe</td></tr><tr><td>SCardSvr</td><td>Smart Card</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation</td></tr><tr><td>ScDeviceEnum</td><td>Smart Card Device Enumeration Service</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted</td></tr><tr><td>Schedule</td><td>Task Scheduler</td><td>Running</td><td>C:\windows\system32\svchost.exe -k netsvcs -p</td></tr><tr><td>SCPolicySvc</td><td>Smart Card Removal Policy</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k netsvcs</td></tr><tr><td>SDRSVC</td><td>Windows 备份</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k SDRSVC</td></tr><tr><td>seclogon</td><td>Secondary Logon</td><td>Running</td><td>C:\windows\system32\svchost.exe -k netsvcs -p</td></tr><tr><td>SecurityHealthService</td><td>Windows 安全中心服务</td><td>Stopped</td><td>C:\windows\system32\SecurityHealthService.exe</td></tr><tr><td>SEMgrSvc</td><td>付款和 NFC/SE 管理器</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalService -p</td></tr><tr><td>SENS</td><td>System Event Notification Service</td><td>Running</td><td>C:\windows\system32\svchost.exe -k netsvcs -p</td></tr><tr><td>Sense</td><td>Windows Defender Advanced Threat Protection Service</td><td>Stopped</td><td>"C:\Program Files\Windows Defender Advanced Threat Protection\MsSense.exe"</td></tr><tr><td>SensorDataService</td><td>Sensor Data Service</td><td>Stopped</td><td>C:\windows\System32\SensorDataService.exe</td></tr><tr><td>SensorService</td><td>Sensor Service</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>SensrSvc</td><td>Sensor Monitoring Service</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p</td></tr><tr><td>SessionEnv</td><td>Remote Desktop Configuration</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k netsvcs -p</td></tr><tr><td>SgrmBroker</td><td>System Guard 运行时监视代理</td><td>Stopped</td><td>C:\windows\system32\Sgrm\SgrmBroker.exe</td></tr><tr><td>SharedAccess</td><td>Internet Connection Sharing (ICS)</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k netsvcs -p</td></tr><tr><td>SharedRealitySvc</td><td>空间数据服务</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalService -p</td></tr><tr><td>ShellHWDetection</td><td>Shell Hardware Detection</td><td>Running</td><td>C:\windows\System32\svchost.exe -k netsvcs -p</td></tr><tr><td>shpamsvc</td><td>Shared PC Account Manager</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k netsvcs -p</td></tr><tr><td>smphost</td><td>Microsoft Storage Spaces SMP</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k smphost</td></tr><tr><td>SmsRouter</td><td>Microsoft Windows SMS 路由器服务。</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p</td></tr><tr><td>SNMPTrap</td><td>SNMP 陷阱</td><td>Stopped</td><td>C:\windows\System32\snmptrap.exe</td></tr><tr><td>spectrum</td><td>Windows 感知服务</td><td>Stopped</td><td>C:\windows\system32\spectrum.exe</td></tr><tr><td>Spooler</td><td>Print Spooler</td><td>Running</td><td>C:\windows\System32\spoolsv.exe</td></tr><tr><td>sppsvc</td><td>Software Protection</td><td>Stopped</td><td>C:\windows\system32\sppsvc.exe</td></tr><tr><td>SSDPSRV</td><td>SSDP Discovery</td><td>Running</td><td>C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p</td></tr><tr><td>ssh-agent</td><td>OpenSSH Authentication Agent</td><td>Stopped</td><td>C:\windows\System32\OpenSSH\ssh-agent.exe</td></tr><tr><td>SstpSvc</td><td>Secure Socket Tunneling Protocol Service</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalService -p</td></tr><tr><td>StateRepository</td><td>State Repository Service</td><td>Running</td><td>C:\windows\system32\svchost.exe -k appmodel -p</td></tr><tr><td>Steam Client Service</td><td>Steam Client Service</td><td>Stopped</td><td>"C:\Program Files (x86)\Common Files\Steam\steamservice.exe" /RunAsService</td></tr><tr><td>StiSvc</td><td>Windows Image Acquisition (WIA)</td><td>Running</td><td>C:\windows\system32\svchost.exe -k imgsvc</td></tr><tr><td>StorSvc</td><td>Storage Service</td><td>Running</td><td>C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>SunloginService</td><td>SunloginService</td><td>Stopped</td><td>"D:\Oray\SunLogin\SunloginClient\SunloginClient.exe" --mod=service</td></tr><tr><td>svsvc</td><td>Spot Verifier</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>swprv</td><td>Microsoft Software Shadow Copy Provider</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k swprv</td></tr><tr><td>SysMain</td><td>SysMain</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>SystemEventsBroker</td><td>System Events Broker</td><td>Running</td><td>C:\windows\system32\svchost.exe -k DcomLaunch -p</td></tr><tr><td>TapiSrv</td><td>Telephony</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k NetworkService -p</td></tr><tr><td>TermService</td><td>Remote Desktop Services</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k NetworkService</td></tr><tr><td>TextInputManagementService</td><td>Text Input Management Service</td><td>Running</td><td>C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>Themes</td><td>Themes</td><td>Running</td><td>C:\windows\System32\svchost.exe -k netsvcs -p</td></tr><tr><td>TieringEngineService</td><td>Storage Tiers Management</td><td>Stopped</td><td>C:\windows\system32\TieringEngineService.exe</td></tr><tr><td>TimeBrokerSvc</td><td>Time Broker</td><td>Running</td><td>C:\windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p</td></tr><tr><td>ToDesk_Service</td><td>ToDesk Service</td><td>Stopped</td><td>"D:\ToDesk\ToDesk.exe" --runservice</td></tr><tr><td>TokenBroker</td><td>Web 帐户管理器</td><td>Running</td><td>C:\windows\system32\svchost.exe -k netsvcs -p</td></tr><tr><td>TrkWks</td><td>Distributed Link Tracking Client</td><td>Running</td><td>C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>TroubleshootingSvc</td><td>建议疑难解答服务</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k netsvcs -p</td></tr><tr><td>TrustedInstaller</td><td>Windows Modules Installer</td><td>Stopped</td><td>C:\windows\servicing\TrustedInstaller.exe</td></tr><tr><td>tzautoupdate</td><td>自动时区更新程序</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalService -p</td></tr><tr><td>UevAgentService</td><td>User Experience Virtualization Service</td><td>Stopped</td><td>C:\windows\system32\AgentService.exe</td></tr><tr><td>uhssvc</td><td>Microsoft Update Health Service</td><td>Stopped</td><td>"C:\Program Files\Microsoft Update Health Tools\uhssvc.exe"</td></tr><tr><td>UmRdpService</td><td>Remote Desktop Services UserMode Port Redirector</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>upnphost</td><td>UPnP Device Host</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalServiceAndNoImpersonation -p</td></tr><tr><td>UserManager</td><td>User Manager</td><td>Running</td><td>C:\windows\system32\svchost.exe -k netsvcs -p</td></tr><tr><td>UsoSvc</td><td>更新 Orchestrator 服务</td><td>Running</td><td>C:\windows\system32\svchost.exe -k netsvcs -p</td></tr><tr><td>VacSvc</td><td>立体音频组合器服务</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p</td></tr><tr><td>VaultSvc</td><td>Credential Manager</td><td>Running</td><td>C:\windows\system32\lsass.exe</td></tr><tr><td>vds</td><td>Virtual Disk</td><td>Stopped</td><td>C:\windows\System32\vds.exe</td></tr><tr><td>VMAuthdService</td><td>VMware Authorization Service</td><td>Running</td><td>"D:\VMware Workstation\vmware-authd.exe"</td></tr><tr><td>vmicguestinterface</td><td>Hyper-V Guest Service Interface</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>vmicheartbeat</td><td>Hyper-V Heartbeat Service</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k ICService -p</td></tr><tr><td>vmickvpexchange</td><td>Hyper-V Data Exchange Service</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>vmicrdv</td><td>Hyper-V 远程桌面虚拟化服务</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k ICService -p</td></tr><tr><td>vmicshutdown</td><td>Hyper-V Guest Shutdown Service</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>vmictimesync</td><td>Hyper-V Time Synchronization Service</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p</td></tr><tr><td>vmicvmsession</td><td>Hyper-V PowerShell Direct Service</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>vmicvss</td><td>Hyper-V 卷影复制请求程序</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>VMnetDHCP</td><td>VMware DHCP Service</td><td>Running</td><td>C:\windows\SysWOW64\vmnetdhcp.exe</td></tr><tr><td>VMUSBArbService</td><td>VMware USB Arbitration Service</td><td>Running</td><td>"C:\Program Files (x86)\Common Files\VMware\USB\vmware-usbarbitrator64.exe"</td></tr><tr><td>VMware NAT Service</td><td>VMware NAT Service</td><td>Running</td><td>C:\windows\SysWOW64\vmnat.exe</td></tr><tr><td>VmwareAutostartService</td><td>VMware 自动启动服务</td><td>Stopped</td><td>"D:\VMware Workstation\vmware-autostart.exe"</td></tr><tr><td>VSInstallerElevationService</td><td>Visual Studio Installer Elevation Service</td><td>Stopped</td><td>"C:\Program Files (x86)\Microsoft Visual Studio\Installer\VSInstallerElevationService.exe"</td></tr><tr><td>VSS</td><td>Volume Shadow Copy</td><td>Stopped</td><td>C:\windows\system32\vssvc.exe</td></tr><tr><td>VSStandardCollectorService150</td><td>Visual Studio Standard Collector Service 150</td><td>Stopped</td><td>"C:\Program Files (x86)\Microsoft Visual Studio\Shared\Common\DiagnosticsHub.Collection.Service\StandardCollector.Service.exe"</td></tr><tr><td>W32Time</td><td>Windows Time</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalService</td></tr><tr><td>WaaSMedicSvc</td><td>WaaSMedicSvc</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k wusvcs -p</td></tr><tr><td>WalletService</td><td>WalletService</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k appmodel -p</td></tr><tr><td>WarpJITSvc</td><td>Warp JIT Service</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted</td></tr><tr><td>wbengine</td><td>Block Level Backup Engine Service</td><td>Stopped</td><td>"C:\windows\system32\wbengine.exe"</td></tr><tr><td>WbioSrvc</td><td>Windows Biometric Service</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k WbioSvcGroup</td></tr><tr><td>Wcmsvc</td><td>Windows Connection Manager</td><td>Running</td><td>C:\windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p</td></tr><tr><td>wcncsvc</td><td>Windows Connect Now - Config Registrar</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k LocalServiceAndNoImpersonation -p</td></tr><tr><td>WdiServiceHost</td><td>Diagnostic Service Host</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k LocalService -p</td></tr><tr><td>WdiSystemHost</td><td>Diagnostic System Host</td><td>Running</td><td>C:\windows\System32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>WdNisSvc</td><td>Microsoft Defender Antivirus Network Inspection Service</td><td>Stopped</td><td>"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\NisSrv.exe"</td></tr><tr><td>WebClient</td><td>WebClient</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalService -p</td></tr><tr><td>webthreatdefsvc</td><td>Web 威胁防御服务</td><td>Running</td><td>C:\windows\system32\svchost.exe -k WebThreatDefense -p</td></tr><tr><td>Wecsvc</td><td>Windows Event Collector</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k NetworkService -p</td></tr><tr><td>WemeetUpdateSvc</td><td>WemeetUpdateSvc</td><td>Stopped</td><td>"C:\Program Files (x86)\Tencent\UpdateSvr\WemeetUpdateSvc.exe"</td></tr><tr><td>WEPHOSTSVC</td><td>Windows Encryption Provider Host Service</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k WepHostSvcGroup</td></tr><tr><td>wercplsupport</td><td>Problem Reports Control Panel Support</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k netsvcs -p</td></tr><tr><td>WerSvc</td><td>Windows Error Reporting Service</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k WerSvcGroup</td></tr><tr><td>WFDSConMgrSvc</td><td>WLAN Direct 服务连接管理器服务</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p</td></tr><tr><td>WiaRpc</td><td>Still Image Acquisition Events</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>WinDefend</td><td>Microsoft Defender Antivirus Service</td><td>Running</td><td>"C:\ProgramData\Microsoft\Windows Defender\Platform\4.18.24090.11-0\MsMpEng.exe"</td></tr><tr><td>WinHttpAutoProxySvc</td><td>WinHTTP Web Proxy Auto-Discovery Service</td><td>Running</td><td>C:\windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p</td></tr><tr><td>Winmgmt</td><td>Windows Management Instrumentation</td><td>Running</td><td>C:\windows\system32\svchost.exe -k netsvcs -p</td></tr><tr><td>WinRM</td><td>Windows Remote Management (WS-Management)</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k NetworkService -p</td></tr><tr><td>wisvc</td><td>Windows 预览体验成员服务</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k netsvcs -p</td></tr><tr><td>WlanSvc</td><td>WLAN AutoConfig</td><td>Running</td><td>C:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>wlidsvc</td><td>Microsoft Account Sign-in Assistant</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k netsvcs -p</td></tr><tr><td>wlpasvc</td><td>本地配置文件助手服务</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalServiceNetworkRestricted -p</td></tr><tr><td>WManSvc</td><td>Windows 管理服务</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k netsvcs -p</td></tr><tr><td>wmiApSrv</td><td>WMI Performance Adapter</td><td>Stopped</td><td>C:\windows\system32\wbem\WmiApSrv.exe</td></tr><tr><td>WMPNetworkSvc</td><td>Windows Media Player Network Sharing Service</td><td>Stopped</td><td>"C:\Program Files\Windows Media Player\wmpnetwk.exe"</td></tr><tr><td>workfolderssvc</td><td>Work Folders</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k LocalService -p</td></tr><tr><td>WpcMonSvc</td><td>家长控制</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalService</td></tr><tr><td>WPDBusEnum</td><td>Portable Device Enumerator Service</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted</td></tr><tr><td>WpnService</td><td>Windows 推送通知系统服务</td><td>Running</td><td>C:\windows\system32\svchost.exe -k netsvcs -p</td></tr><tr><td>wpscloudsvr</td><td>WPS Office Cloud Service</td><td>Stopped</td><td>"C:\Program Files (x86)\Kingsoft\office6\wpscloudsvr.exe" LocalService</td></tr><tr><td>wscsvc</td><td>安全中心</td><td>Running</td><td>C:\windows\System32\svchost.exe -k LocalServiceNetworkRestricted -p</td></tr><tr><td>WSearch</td><td>Windows Search</td><td>Running</td><td>C:\windows\system32\SearchIndexer.exe /Embedding</td></tr><tr><td>wuauserv</td><td>Windows 更新</td><td>Running</td><td>C:\windows\system32\svchost.exe -k netsvcs -p</td></tr><tr><td>WwanSvc</td><td>WWAN AutoConfig</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>XblAuthManager</td><td>Xbox Live 身份验证管理器</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k netsvcs -p</td></tr><tr><td>XblGameSave</td><td>Xbox Live 游戏保存</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k netsvcs -p</td></tr><tr><td>XboxGipSvc</td><td>Xbox Accessory Management Service</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k netsvcs -p</td></tr><tr><td>XboxNetApiSvc</td><td>Xbox Live 网络服务</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k netsvcs -p</td></tr><tr><td>AarSvc_14ee05</td><td>Agent Activation Runtime_14ee05</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k AarSvcGroup -p</td></tr><tr><td>BcastDVRUserService_14ee05</td><td>GameDVR 和广播用户服务_14ee05</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k BcastDVRUserService</td></tr><tr><td>BluetoothUserService_14ee05</td><td>蓝牙用户支持服务_14ee05</td><td>Running</td><td>C:\windows\system32\svchost.exe -k BthAppGroup -p</td></tr><tr><td>CaptureService_14ee05</td><td>CaptureService_14ee05</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k LocalService -p</td></tr><tr><td>cbdhsvc_14ee05</td><td>剪贴板用户服务_14ee05</td><td>Running</td><td>C:\windows\system32\svchost.exe -k ClipboardSvcGroup -p</td></tr><tr><td>CDPUserSvc_14ee05</td><td>连接设备平台用户服务_14ee05</td><td>Running</td><td>C:\windows\system32\svchost.exe -k UnistackSvcGroup</td></tr><tr><td>CloudBackupRestoreSvc_14ee05</td><td>云备份和还原服务_14ee05</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k UnistackSvcGroup</td></tr><tr><td>ConsentUxUserSvc_14ee05</td><td>ConsentUX 用户服务_14ee05</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k DevicesFlow</td></tr><tr><td>CredentialEnrollmentManagerUserSvc_14ee05</td><td>CredentialEnrollmentManagerUserSvc_14ee05</td><td>Stopped</td><td>C:\windows\system32\CredentialEnrollmentManager.exe</td></tr><tr><td>DeviceAssociationBrokerSvc_14ee05</td><td>DeviceAssociationBroker_14ee05</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k DevicesFlow -p</td></tr><tr><td>DevicePickerUserSvc_14ee05</td><td>DevicePicker_14ee05</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k DevicesFlow</td></tr><tr><td>DevicesFlowUserSvc_14ee05</td><td>DevicesFlow_14ee05</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k DevicesFlow</td></tr><tr><td>MessagingService_14ee05</td><td>MessagingService_14ee05</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k UnistackSvcGroup</td></tr><tr><td>NPSMSvc_14ee05</td><td>NPSMSvc_14ee05</td><td>Running</td><td>C:\windows\system32\svchost.exe -k LocalService -p</td></tr><tr><td>OneSyncSvc_14ee05</td><td>同步主机_14ee05</td><td>Running</td><td>C:\windows\system32\svchost.exe -k UnistackSvcGroup</td></tr><tr><td>P9RdrService_14ee05</td><td>P9RdrService_14ee05</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k P9RdrService -p</td></tr><tr><td>PenService_14ee05</td><td>PenService_14ee05</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k PenService</td></tr><tr><td>PimIndexMaintenanceSvc_14ee05</td><td>Contact Data_14ee05</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k UnistackSvcGroup</td></tr><tr><td>PrintWorkflowUserSvc_14ee05</td><td>PrintWorkflow_14ee05</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k PrintWorkflow</td></tr><tr><td>UdkUserSvc_14ee05</td><td>Udk 用户服务_14ee05</td><td>Running</td><td>C:\windows\system32\svchost.exe -k UdkSvcGroup</td></tr><tr><td>UnistoreSvc_14ee05</td><td>User Data Storage_14ee05</td><td>Stopped</td><td>C:\windows\System32\svchost.exe -k UnistackSvcGroup</td></tr><tr><td>UserDataSvc_14ee05</td><td>User Data Access_14ee05</td><td>Stopped</td><td>C:\windows\system32\svchost.exe -k UnistackSvcGroup</td></tr><tr><td>webthreatdefusersvc_14ee05</td><td>Web 威胁防御用户服务_14ee05</td><td>Running</td><td>C:\windows\system32\svchost.exe -k LocalSystemNetworkRestricted -p</td></tr><tr><td>WpnUserService_14ee05</td><td>Windows Push Notifications User Service_14ee05</td><td>Running</td><td>C:\windows\system32\svchost.exe -k UnistackSvcGroup</td></tr></table></div><div id='user-analysis' class='section'><h2>用户分析</h2><table><tr><th>用户名</th><th>是否禁用</th><th>最后登录时间</th></tr><tr><td>Administrator</td><td>否</td><td>2025-01-02 19:55:38</td></tr><tr><td>DefaultAccount</td><td>是</td><td>N/A</td></tr><tr><td>Guest</td><td>是</td><td>N/A</td></tr><tr><td>WDAGUtilityAccount</td><td>是</td><td>N/A</td></tr><tr><td>XcNgIO</td><td>是</td><td>2024-05-24 19:49:53</td></tr></table></div><div id='env-variables' class='section'><h2>环境变量</h2><table><tr><th>变量名</th><th>路径</th></tr><tr><td>CONDA_PROMPT_MODIFIER</td><td>False</td></tr><tr><td>POSH_AZURE_ENABLED</td><td>False</td></tr><tr><td>POSH_CURSOR_COLUMN</td><td>1</td></tr><tr><td>POSH_CURSOR_LINE</td><td>15</td></tr><tr><td>POSH_GIT_ENABLED</td><td>False</td></tr><tr><td>POSH_PID</td><td>10440</td></tr><tr><td>POSH_SHELL_VERSION</td><td>5.1.22621.4391</td></tr><tr><td>POSH_THEME</td><td>C:\Users\Administrator\AppData\Local\Programs\oh-my-posh\themes\kali.omp.json</td></tr><tr><td>POWERLINE_COMMAND</td><td>oh-my-posh</td></tr><tr><td>PSEXECUTIONPOLICYPREFERENCE</td><td>Bypass</td></tr><tr><td>TERM_SESSION_ID</td><td>76164c42-6c04-439e-a3b3-250dc6b2a9ce</td></tr><tr><td>POSH_INSTALLER</td><td>winget</td></tr><tr><td>COMMONPROGRAMW6432</td><td>C:\Program Files\Common Files</td></tr><tr><td>PROGRAMW6432</td><td>C:\Program Files</td></tr><tr><td>GOPATH</td><td>C:\Users\Administrator\go</td></tr><tr><td>USERNAME</td><td>Administrator</td></tr><tr><td>ALLUSERSPROFILE</td><td>C:\ProgramData</td></tr><tr><td>LIB</td><td>D:\Microsoft Visual Studio\2022\Community\VC\Tools\MSVC\14.40.33807\lib\x64;C:\Program Files (x86)\Windows Kits\10\Lib\10.0.22621.0\ucrt\x64;C:\Program Files (x86)\Windows Kits\10\Lib\10.0.22621.0\um\x64;</td></tr><tr><td>USERPROFILE</td><td>C:\Users\Administrator</td></tr><tr><td>VIRTUAL_ENV</td><td>E:\Code\PythonProject\sys-any-dev\venv\py37</td></tr><tr><td>VIRTUAL_ENV_PROMPT</td><td>py37</td></tr><tr><td>YAKIT_HOME</td><td>F:\Yakit\yakit-projects</td></tr><tr><td>PROCESSOR_REVISION</td><td>7502</td></tr><tr><td>IDEA_INITIAL_DIRECTORY</td><td>D:\JetBrains\PyCharm\bin</td></tr><tr><td>MAVEN_HOME</td><td>D:\Compiler\apache-maven-3.9.6</td></tr><tr><td>FPS_BROWSER_APP_PROFILE_STRING</td><td>Internet Explorer</td></tr><tr><td>PUBLIC</td><td>C:\Users\Public</td></tr><tr><td>PATH</td><td>E:\Code\PythonProject\sys-any-dev\venv\py37\lib\site-packages\pywin32_system32;E:\Code\PythonProject\sys-any-dev\venv\py37/Scripts;D:\VMware Workstation\bin\;D:\Compiler\Python3.10\Scripts\;D:\Compiler\Python3.10\;D:\Compiler\Python2.7\;C:\windows\system32;C:\windows;C:\windows\System32\Wbem;C:\windows\System32\WindowsPowerShell\v1.0\;C:\windows\System32\OpenSSH\;D:\Bandizip\;D:\Compiler\jdk-1.8\bin;D:\Compiler\jdk-1.8\jre;D:\Compiler\NodeJS;D:\Git\cmd;D:\Compiler\apache-maven-3.9.6\bin;D:\Tencent\WeChatDevTools\dll;D:\ffmpeg_full_build\bin;D:\Compiler\mingw64\bin;D:\Microsoft Visual Studio\2022\Community\VC\Tools\MSVC\14.40.33807\bin\Hostx64\x64;D:\Compiler\Go1.22\bin;D:\CMake\bin;F:\yafu-1.34;F:\dig\;F:\nuclei;F:\upx-4.2.3-win64;F:\pycdc-master\build\;F:\NetCat;C:\Program Files\dotnet\;F:\Trojans\shellcodeTools\;F:\Trojans\sgn_windows_amd64_2.0.1\;D:\platform-tools\;H:\Metasploit\metasploit-framework\bin\;F:\Trojans\CheckGoBuild;D:\Compiler\nim-2.0.0\bin;D:\Compiler\rust\cargo_home\bin;C:\Users\Administrator\AppData\Local\Microsoft\WindowsApps;C:\Users\Administrator\AppData\Roaming\npm;C:\Users\Administrator\AppData\Local\Programs\oh-my-posh\bin;F:\Nmap;D:\Microsoft VS Code\bin;C:\Users\Administrator\AppData\Local\Programs\Ollama;C:\Users\Administrator\go\bin</td></tr><tr><td>GOROOT</td><td>D:\Compiler\Go1.22</td></tr><tr><td>DRIVERDATA</td><td>C:\Windows\System32\Drivers\DriverData</td></tr><tr><td>HOMEDRIVE</td><td>C:</td></tr><tr><td>SESSIONNAME</td><td>Console</td></tr><tr><td>LOGONSERVER</td><td>\\XCNGIO-FIREBAT</td></tr><tr><td>TERMINAL_EMULATOR</td><td>JetBrains-JediTerm</td></tr><tr><td>HOMEPATH</td><td>\Users\Administrator</td></tr><tr><td>SYSTEMROOT</td><td>C:\windows</td></tr><tr><td>LOCALAPPDATA</td><td>C:\Users\Administrator\AppData\Local</td></tr><tr><td>RUSTUP_UPDATE_ROOT</td><td>https://mirrors.ustc.edu.cn/rust-static/rustup</td></tr><tr><td>APPDATA</td><td>C:\Users\Administrator\AppData\Roaming</td></tr><tr><td>PROCESSOR_IDENTIFIER</td><td>AMD64 Family 25 Model 117 Stepping 2, AuthenticAMD</td></tr><tr><td>PATHEXT</td><td>.COM;.EXE;.BAT;.CMD;.VBS;.VBE;.JS;.JSE;.WSF;.WSH;.MSC;.PY;.PYW;.CPL</td></tr><tr><td>RUSTUP_DIST_SERVER</td><td>https://mirrors.ustc.edu.cn/rust-static</td></tr><tr><td>PSMODULEPATH</td><td>E:\Users\Administrator\Documents\WindowsPowerShell\Modules;C:\Program Files\WindowsPowerShell\Modules;C:\windows\system32\WindowsPowerShell\v1.0\Modules</td></tr><tr><td>PROGRAMFILES(X86)</td><td>C:\Program Files (x86)</td></tr><tr><td>CARGO_HOME</td><td>D:\Compiler\rust\cargo_home</td></tr><tr><td>RUSTUP_HOME</td><td>D:\Compiler\rust\rustup_home</td></tr><tr><td>EFC_9232</td><td>1</td></tr><tr><td>JETBRAINS_INTELLIJ_COMMAND_END_MARKER</td><td>5tbIGZz8fjPri3HhWQi6i0OuvUDV1WPf37j6Lwt1z0t7dz3NYSTToBH87i45Da4F</td></tr><tr><td>OS</td><td>Windows_NT</td></tr><tr><td>PROCESSOR_ARCHITECTURE</td><td>AMD64</td></tr><tr><td>123PAN</td><td>D:\123pan\123pan.exe</td></tr><tr><td>NUMBER_OF_PROCESSORS</td><td>16</td></tr><tr><td>JAVA_HOME</td><td>D:\Compiler\jdk-1.8</td></tr><tr><td>COMSPEC</td><td>C:\windows\system32\cmd.exe</td></tr><tr><td>PROCESSOR_LEVEL</td><td>25</td></tr><tr><td>WINDIR</td><td>C:\windows</td></tr><tr><td>USERDOMAIN_ROAMINGPROFILE</td><td>XCNGIO-FIREBAT</td></tr><tr><td>PROGRAMFILES</td><td>C:\Program Files</td></tr><tr><td>TEMP</td><td>C:\Users\ADMINI~1\AppData\Local\Temp</td></tr><tr><td>POSH_THEMES_PATH</td><td>C:\Users\Administrator\AppData\Local\Programs\oh-my-posh\themes</td></tr><tr><td>TMP</td><td>C:\Users\ADMINI~1\AppData\Local\Temp</td></tr><tr><td>COMMONPROGRAMFILES(X86)</td><td>C:\Program Files (x86)\Common Files</td></tr><tr><td>ONEDRIVE</td><td>C:\Users\Administrator\OneDrive</td></tr><tr><td>USERDOMAIN</td><td>XCNGIO-FIREBAT</td></tr><tr><td>SYSTEMDRIVE</td><td>C:</td></tr><tr><td>COMPUTERNAME</td><td>XCNGIO-FIREBAT</td></tr><tr><td>PROGRAMDATA</td><td>C:\ProgramData</td></tr><tr><td>INCLUDE</td><td>D:\Microsoft Visual Studio\2022\Community\VC\Tools\MSVC\14.40.33807\include;C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\shared;C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\ucrt;C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\um;C:\Program Files (x86)\Windows Kits\10\Include\10.0.22621.0\winrt;</td></tr><tr><td>FPS_BROWSER_USER_PROFILE_STRING</td><td>Default</td></tr><tr><td>COMMONPROGRAMFILES</td><td>C:\Program Files\Common Files</td></tr></table></div><div id='scheduled-tasks' class='section'><h2>计划任务</h2><table><tr><th>任务名称</th><th>状态</th><th>下次运行时间</th><th>触发器</th><th>运行程序</th><th>任务参数</th><th>最后执行结果</th></tr><tr><td>Huorong PopBlock</td><td>4</td><td>1899-12-30 00:00:00+00:00</td><td></td><td>D:\Huorong\Sysdiag\bin\PopBlock.exe</td><td>-hide</td><td>未知</td></tr><tr><td>MicrosoftEdgeUpdateTaskMachineCore</td><td>3</td><td>2025-01-03 11:37:43+00:00</td><td>, 2024-12-22T11:37:43</td><td>C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe</td><td>/c</td><td>未知</td></tr><tr><td>MicrosoftEdgeUpdateTaskMachineUA</td><td>3</td><td>2025-01-02 21:07:43+00:00</td><td>2024-12-22T11:07:43</td><td>C:\Program Files (x86)\Microsoft\EdgeUpdate\MicrosoftEdgeUpdate.exe</td><td>/ua /installsource scheduler</td><td>未知</td></tr><tr><td>npcapwatchdog</td><td>3</td><td>1899-12-30 00:00:00+00:00</td><td></td><td>C:\Program Files\Npcap\CheckStatus.bat</td><td></td><td>未知</td></tr><tr><td>StartAUEP</td><td>4</td><td>1899-12-30 00:00:00+00:00</td><td>2016-12-11T23:29:00</td><td>"C:\Program Files\AMD\Performance Profile Client\AUEPMaster.exe"</td><td></td><td>未知</td></tr><tr><td>StartCN</td><td>3</td><td>1899-12-30 00:00:00+00:00</td><td>2016-12-11T23:29:00</td><td>"C:\Program Files\AMD\CNext\CNext\cncmd.exe"</td><td>startwithdelay</td><td>未知</td></tr><tr><td>StartCNBM</td><td>3</td><td>1899-12-30 00:00:00+00:00</td><td>2024-09-13T00:00:00</td><td>"C:\Program Files\AMD\CNext\CNext\cncmd.exe"</td><td>benchmark</td><td>未知</td></tr><tr><td>StartDVR</td><td>3</td><td>1899-12-30 00:00:00+00:00</td><td>2016-12-11T23:29:00</td><td>"C:\Program Files\AMD\CNext\CNext\RSServCmd.exe"</td><td></td><td>未知</td></tr><tr><td>WpsUpdateLogonTask_Administrator</td><td>3</td><td>1899-12-30 00:00:00+00:00</td><td></td><td>D:\Kingsoft\WPS Office\ksolaunch.exe</td><td>/wpsupdate -from=task -source=task</td><td>未知</td></tr><tr><td>WpsUpdateTask_Administrator</td><td>3</td><td>2025-01-02 21:11:52+00:00</td><td>2024-12-06T08:11:52</td><td>D:\Kingsoft\WPS Office\ksolaunch.exe</td><td>/wpsupdate -from=task -source=task</td><td>未知</td></tr><tr><td>WpsWakeWnsLogonTask</td><td>3</td><td>1899-12-30 00:00:00+00:00</td><td></td><td>"D:\Kingsoft\WPS Office\\ksolaunch.exe"</td><td>Run addons/kpluginwrapper/kpluginwrapper.dll run_plugin -plugin_name=kmessagepushcenter -dll_name=kmessagepushcenter wake_wns</td><td>未知</td></tr></table></div><div id='recent_files' class='section'><h2>最近访问</h2><table><tr><th>文件名</th><th>所在路径</th><th>最近访问时间</th></tr><tr><td>1.txt.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\1.txt.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>2023-人员绩效考核评估表-曹华栋.docx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\2023-人员绩效考核评估表-曹华栋.docx.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>20240203.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\20240203.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>20240716.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\20240716.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>20240727.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\20240727.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>20241121 (2).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\20241121 (2).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>20241121 (3).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\20241121 (3).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>20241121 (5).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\20241121 (5).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>20241121.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\20241121.lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>20241128-oms.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\20241128-oms.lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>20241227.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\20241227.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>2024年末网络安全工程师技能考核大纲  .docx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\2024年末网络安全工程师技能考核大纲  .docx.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>2024年末网络安全工程师技能考核大纲  .pdf.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\2024年末网络安全工程师技能考核大纲  .pdf.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>2025.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\2025.lnk</td><td>2025-01-02 17:02:56</td></tr><tr><td>2025011x.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\2025011x.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>access.log.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\access.log.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>AI赋能自动化攻防.pdf.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\AI赋能自动化攻防.pdf.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>AnyThings (H).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\AnyThings (H).lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>APT视角下的攻防实践-新.pdf.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\APT视角下的攻防实践-新.pdf.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>archaius.json.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\archaius.json.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>AssistiveTools (2).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\AssistiveTools (2).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>AutomaticDestinations</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\AutomaticDestinations</td><td>2025-01-02 20:19:03</td></tr><tr><td>burp-suite-http-proxy-history-converter.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\burp-suite-http-proxy-history-converter.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>BypassWeiBuSandbox (2).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\BypassWeiBuSandbox (2).lnk</td><td>2024-12-25 15:52:53</td></tr><tr><td>BypassWeiBuSandbox.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\BypassWeiBuSandbox.lnk</td><td>2024-12-26 15:02:54</td></tr><tr><td>client.py.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\client.py.lnk</td><td>2025-01-02 16:38:53</td></tr><tr><td>CustomDestinations</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\CustomDestinations</td><td>2025-01-02 17:39:14</td></tr><tr><td>desktop.ini</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\desktop.ini</td><td>2025-01-02 20:19:26</td></tr><tr><td>Dir.txt.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\Dir.txt.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>edoc2.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\edoc2.lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>emergency-response-toolkit-lite (2).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\emergency-response-toolkit-lite (2).lnk</td><td>2024-12-22 21:34:10</td></tr><tr><td>emergency-response-toolkit-lite.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\emergency-response-toolkit-lite.lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>env_info_20250102_142722.csv.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\env_info_20250102_142722.csv.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>env绕过测试.log.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\env绕过测试.log.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>external_netstat_20250102_163454.csv.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\external_netstat_20250102_163454.csv.lnk</td><td>2025-01-02 16:35:16</td></tr><tr><td>health.json.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\health.json.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>hosts.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\hosts.lnk</td><td>2024-12-29 14:03:42</td></tr><tr><td>http--www.msftconnecttest.com-redirect.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\http--www.msftconnecttest.com-redirect.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>InformationCollection (2).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\InformationCollection (2).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>Internet.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\Internet.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>local_netstat_20250102_102759.xlsx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\local_netstat_20250102_102759.xlsx.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>main.py.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\main.py.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (10).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (10).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (11).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (11).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (12).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (12).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (13).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (13).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (14).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (14).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (15).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (15).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (16).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (16).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (17).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (17).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (18).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (18).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (19).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (19).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (2).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (2).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (20).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (20).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (21).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (21).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (22).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (22).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (23).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (23).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (24).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (24).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (25).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (25).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (26).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (26).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (27).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (27).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (28).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (28).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (29).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (29).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (3).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (3).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (30).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (30).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (31).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (31).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (32).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (32).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (33).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (33).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (34).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (34).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (35).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (35).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (36).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (36).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (37).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (37).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (38).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (38).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (39).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (39).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (4).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (4).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (40).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (40).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (41).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (41).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (42).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (42).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (43).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (43).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (44).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (44).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (45).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (45).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (46).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (46).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (47).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (47).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (48).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (48).lnk</td><td>2024-12-22 12:42:19</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (49).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (49).lnk</td><td>2024-12-23 10:20:13</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (5).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (5).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (50).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (50).lnk</td><td>2024-12-23 10:47:42</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (51).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (51).lnk</td><td>2024-12-23 10:56:15</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (52).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (52).lnk</td><td>2024-12-23 13:37:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (53).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (53).lnk</td><td>2024-12-23 15:08:06</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (54).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (54).lnk</td><td>2024-12-23 15:45:41</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (55).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (55).lnk</td><td>2024-12-23 16:00:14</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (56).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (56).lnk</td><td>2024-12-24 10:25:50</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (57).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (57).lnk</td><td>2024-12-24 14:16:14</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (58).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (58).lnk</td><td>2024-12-24 15:16:59</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (59).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (59).lnk</td><td>2024-12-24 21:02:32</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (6).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (6).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (60).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (60).lnk</td><td>2024-12-26 09:45:42</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (61).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (61).lnk</td><td>2024-12-26 12:44:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (62).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (62).lnk</td><td>2024-12-27 09:58:50</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (63).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (63).lnk</td><td>2024-12-27 14:28:05</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (64).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (64).lnk</td><td>2024-12-30 08:48:15</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (65).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (65).lnk</td><td>2024-12-30 12:52:59</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (66).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (66).lnk</td><td>2024-12-31 14:45:50</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (67).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (67).lnk</td><td>2025-01-01 11:39:09</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (68).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (68).lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (7).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (7).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (8).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (8).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (9).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0 (9).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-actioncentercontrolcenter-&suppressAnimations=false&showFooter=true&allowPageNavigation=true&edgeGestureOffset=0&inputAnimationSourceId=0&inputAnimationProviderId=0.lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-settingsbatterysaver.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-settingsbatterysaver.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>ms-settingsnetwork (2).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-settingsnetwork (2).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-settingsnetwork (3).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-settingsnetwork (3).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>ms-settingsnetwork.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\ms-settingsnetwork.lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>my.ini.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\my.ini.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>MyFiles.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\MyFiles.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>MySQL5.7.26.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\MySQL5.7.26.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>netstat_20250102_102537.xlsx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\netstat_20250102_102537.xlsx.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>network_adapter_20250102_165729.csv.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\network_adapter_20250102_165729.csv.lnk</td><td>2025-01-02 17:00:47</td></tr><tr><td>network_adapter_20250102_165836.csv.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\network_adapter_20250102_165836.csv.lnk</td><td>2025-01-02 16:58:44</td></tr><tr><td>network_adapter_20250102_170130.csv.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\network_adapter_20250102_170130.csv.lnk</td><td>2025-01-02 17:01:36</td></tr><tr><td>network_adapter_20250102_170225.csv.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\network_adapter_20250102_170225.csv.lnk</td><td>2025-01-02 17:06:26</td></tr><tr><td>network_adapter_20250102_170357.csv.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\network_adapter_20250102_170357.csv.lnk</td><td>2025-01-02 17:05:34</td></tr><tr><td>network_adapter_20250102_170527.csv.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\network_adapter_20250102_170527.csv.lnk</td><td>2025-01-02 17:05:36</td></tr><tr><td>network_adapter_20250102_170623.csv.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\network_adapter_20250102_170623.csv.lnk</td><td>2025-01-02 17:06:30</td></tr><tr><td>network_adapter_20250102_201027.csv.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\network_adapter_20250102_201027.csv.lnk</td><td>2025-01-02 20:18:46</td></tr><tr><td>nps-crack.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\nps-crack.lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>OSCP 备忘单和命令参考.pdf.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\OSCP 备忘单和命令参考.pdf.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>output (2).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\output (2).lnk</td><td>2025-01-02 20:18:48</td></tr><tr><td>output.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\output.lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>QuickLaunchToolbox (2).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\QuickLaunchToolbox (2).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>QuickLaunchToolbox (3).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\QuickLaunchToolbox (3).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>QuickLaunchToolbox (4).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\QuickLaunchToolbox (4).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>QuickLaunchToolbox (5).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\QuickLaunchToolbox (5).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>QuickLaunchToolbox.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\QuickLaunchToolbox.lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>README.md.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\README.md.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>recent_files_20250102_161836.xlsx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\recent_files_20250102_161836.xlsx.lnk</td><td>2025-01-02 16:30:14</td></tr><tr><td>request.log.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\request.log.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>request3.log.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\request3.log.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>Scan-Spring-GO.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\Scan-Spring-GO.lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>scheduled_tasks_20250102_144129.csv.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\scheduled_tasks_20250102_144129.csv.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>scheduled_tasks_20250102_145633.csv.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\scheduled_tasks_20250102_145633.csv.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>send-sandbox.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\send-sandbox.lnk</td><td>2025-01-02 16:38:53</td></tr><tr><td>service_info_20250102_112455.csv.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\service_info_20250102_112455.csv.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>SpringBoot-Scan.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\SpringBoot-Scan.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>system_report_20250102_152129.html.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\system_report_20250102_152129.html.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>system_report_20250102_152510.html.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\system_report_20250102_152510.html.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>system_report_20250102_153106.html.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\system_report_20250102_153106.html.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>system_report_20250102_153500.html.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\system_report_20250102_153500.html.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>system_report_20250102_153825.html.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\system_report_20250102_153825.html.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>system_report_20250102_154144.html.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\system_report_20250102_154144.html.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>system_report_20250102_154752.html.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\system_report_20250102_154752.html.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>system_report_20250102_155032.html.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\system_report_20250102_155032.html.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>system_report_20250102_155501.html.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\system_report_20250102_155501.html.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>system_report_20250102_163715.html.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\system_report_20250102_163715.html.lnk</td><td>2025-01-02 16:37:37</td></tr><tr><td>system_report_20250102_164848.html.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\system_report_20250102_164848.html.lnk</td><td>2025-01-02 16:49:14</td></tr><tr><td>system_report_20250102_165032.html.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\system_report_20250102_165032.html.lnk</td><td>2025-01-02 16:50:53</td></tr><tr><td>system_report_20250102_170815.html.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\system_report_20250102_170815.html.lnk</td><td>2025-01-02 17:19:52</td></tr><tr><td>system_report_20250102_171610.html.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\system_report_20250102_171610.html.lnk</td><td>2025-01-02 17:19:29</td></tr><tr><td>system_report_20250102_171902.html.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\system_report_20250102_171902.html.lnk</td><td>2025-01-02 17:19:56</td></tr><tr><td>system_report_20250102_172159.html.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\system_report_20250102_172159.html.lnk</td><td>2025-01-02 17:22:27</td></tr><tr><td>system_report_20250102_172258.html.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\system_report_20250102_172258.html.lnk</td><td>2025-01-02 17:23:14</td></tr><tr><td>system_report_20250102_172358.html.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\system_report_20250102_172358.html.lnk</td><td>2025-01-02 17:24:51</td></tr><tr><td>system_report_20250102_172718.html.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\system_report_20250102_172718.html.lnk</td><td>2025-01-02 17:27:45</td></tr><tr><td>system_report_20250102_201828.html.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\system_report_20250102_201828.html.lnk</td><td>2025-01-02 20:18:48</td></tr><tr><td>test-ftp.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\test-ftp.lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>Torjans (2).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\Torjans (2).lnk</td><td>2024-12-25 15:52:53</td></tr><tr><td>TScanBypass40x-ALL.xlsx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\TScanBypass40x-ALL.xlsx.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>TScanBypass40x.xlsx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\TScanBypass40x.xlsx.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>TscanPlus-Result.txt.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\TscanPlus-Result.txt.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>TscanPlus.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\TscanPlus.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>UrlFinder-https_shareplatform.sanjiang.com_api_trace-20250101-183714.xlsx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\UrlFinder-https_shareplatform.sanjiang.com_api_trace-20250101-183714.xlsx.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>UrlFinder-https_shareplatform.sanjiang.com_api_trace-20250101-205834.xlsx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\UrlFinder-https_shareplatform.sanjiang.com_api_trace-20250101-205834.xlsx.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>UrlFinder-https_shareplatform.sanjiang.com_api_trace-20250101-210233.xlsx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\UrlFinder-https_shareplatform.sanjiang.com_api_trace-20250101-210233.xlsx.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>usersInfo-test.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\usersInfo-test.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>users_info_20250102_105819.csv.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\users_info_20250102_105819.csv.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>users_info_20250102_105956.csv.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\users_info_20250102_105956.csv.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>users_info_20250102_110104.csv.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\users_info_20250102_110104.csv.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>users_info_20250102_110453.csv.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\users_info_20250102_110453.csv.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>users_info_20250102_110656.csv.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\users_info_20250102_110656.csv.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>users_info_20250102_110755.csv.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\users_info_20250102_110755.csv.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>user_groups_20250102_105009.csv.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\user_groups_20250102_105009.csv.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>VmHost (G).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\VmHost (G).lnk</td><td>2024-12-28 20:15:06</td></tr><tr><td>Wallpaper.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\Wallpaper.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>whitebeacon.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\whitebeacon.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>windows.xlsx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\windows.xlsx.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>Windows日志分析.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\Windows日志分析.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>【哲风壁纸】书房-夜晚.png.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\【哲风壁纸】书房-夜晚.png.lnk</td><td>2025-01-02 16:09:45</td></tr><tr><td>下载.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\下载.lnk</td><td>2025-01-02 15:52:23</td></tr><tr><td>中共宁波市委机要和保密局安全评估报告20241227.docx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\中共宁波市委机要和保密局安全评估报告20241227.docx.lnk</td><td>2024-12-30 17:34:56</td></tr><tr><td>主机巡检 (2).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\主机巡检 (2).lnk</td><td>2024-12-23 09:45:00</td></tr><tr><td>事件处置 (2).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\事件处置 (2).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>事件处置.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\事件处置.lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>互联网漏洞.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\互联网漏洞.lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>公司白名单地址.txt.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\公司白名单地址.txt.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>再接再厉：又一次 OSCP 之旅.pdf.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\再接再厉：又一次 OSCP 之旅.pdf.lnk</td><td>2025-01-02 11:09:24</td></tr><tr><td>初级工程师windows实操环境说明.docx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\初级工程师windows实操环境说明.docx.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>外部IP信息.xlsx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\外部IP信息.xlsx.lnk</td><td>2025-01-02 10:23:28</td></tr><tr><td>季度报告 (2).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\季度报告 (2).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>季度报告.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\季度报告.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>宁波公共自行车租赁系统等级保护差距分析报告20241226.docx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\宁波公共自行车租赁系统等级保护差距分析报告20241226.docx.lnk</td><td>2025-01-02 11:49:34</td></tr><tr><td>宁波壹安信息科技有限公司.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\宁波壹安信息科技有限公司.lnk</td><td>2025-01-02 11:49:34</td></tr><tr><td>宁波大学附属人民医院季度主机巡检报告（共4期 第1期）.docx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\宁波大学附属人民医院季度主机巡检报告（共4期 第1期）.docx.lnk</td><td>2025-01-02 17:02:56</td></tr><tr><td>宁波大学附属人民医院月度安全设备巡检报告（共12期 第1期）.docx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\宁波大学附属人民医院月度安全设备巡检报告（共12期 第1期）.docx.lnk</td><td>2025-01-02 17:02:44</td></tr><tr><td>宁波市公共自行车服务发展有限公司 (2).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\宁波市公共自行车服务发展有限公司 (2).lnk</td><td>2024-12-27 15:19:55</td></tr><tr><td>宁波市民卡运营管理有限公司主机巡检20240716_总报告.xlsx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\宁波市民卡运营管理有限公司主机巡检20240716_总报告.xlsx.lnk</td><td>2025-01-02 15:58:16</td></tr><tr><td>宁波市民卡运营管理有限公司季度安全运维服务报告20240930.docx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\宁波市民卡运营管理有限公司季度安全运维服务报告20240930.docx.lnk</td><td>2025-01-02 15:58:35</td></tr><tr><td>安全设备巡检.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\安全设备巡检.lnk</td><td>2025-01-02 17:02:44</td></tr><tr><td>安服工具箱测试问题20241204.docx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\安服工具箱测试问题20241204.docx.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>实操记录表-初级运维-曹华栋.docx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\实操记录表-初级运维-曹华栋.docx.lnk</td><td>2025-01-02 11:49:53</td></tr><tr><td>实操记录表-初级运维-曹华栋.pdf.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\实操记录表-初级运维-曹华栋.pdf.lnk</td><td>2025-01-02 11:49:37</td></tr><tr><td>应急响应靶场Web3.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\应急响应靶场Web3.lnk</td><td>2025-01-02 09:57:07</td></tr><tr><td>应急响应靶机训练 - Web3.ovf.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\应急响应靶机训练 - Web3.ovf.lnk</td><td>2025-01-02 09:57:07</td></tr><tr><td>应急工具 (2).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\应急工具 (2).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>应急工具 (3).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\应急工具 (3).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>应急工具 (4).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\应急工具 (4).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>应急工具 (5).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\应急工具 (5).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>应急工具 (6).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\应急工具 (6).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>应急工具.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\应急工具.lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>我的 (2).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\我的 (2).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>所有路径.txt.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\所有路径.txt.lnk</td><td>2025-01-02 09:25:51</td></tr><tr><td>所有路径测试.xlsx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\所有路径测试.xlsx.lnk</td><td>2025-01-01 20:47:14</td></tr><tr><td>所有路径访问测试.xlsx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\所有路径访问测试.xlsx.lnk</td><td>2025-01-02 08:54:40</td></tr><tr><td>文档资料.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\文档资料.lnk</td><td>2024-12-31 14:51:57</td></tr><tr><td>新建 Microsoft Word 文档 (2).docx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\新建 Microsoft Word 文档 (2).docx.lnk</td><td>2024-12-30 17:34:28</td></tr><tr><td>新建 文本文档 (2).txt.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\新建 文本文档 (2).txt.lnk</td><td>2025-01-02 09:15:03</td></tr><tr><td>新建 文本文档.txt.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\新建 文本文档.txt.lnk</td><td>2025-01-02 09:27:46</td></tr><tr><td>新建文件夹 (2).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\新建文件夹 (2).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>新建文件夹 (3).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\新建文件夹 (3).lnk</td><td>2025-01-02 09:22:07</td></tr><tr><td>新建文件夹.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\新建文件夹.lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>日志审计考核题.docx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\日志审计考核题.docx.lnk</td><td>2025-01-02 11:49:34</td></tr><tr><td>日志审计项考核题-曹华栋.docx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\日志审计项考核题-曹华栋.docx.lnk</td><td>2025-01-02 11:49:34</td></tr><tr><td>条件限制.txt.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\条件限制.txt.lnk</td><td>2025-01-02 09:22:07</td></tr><tr><td>桌面 (2).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\桌面 (2).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>桌面 (3).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\桌面 (3).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>桌面 (4).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\桌面 (4).lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>桌面 (5).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\桌面 (5).lnk</td><td>2024-12-23 13:43:04</td></tr><tr><td>桌面.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\桌面.lnk</td><td>2024-12-21 22:50:39</td></tr><tr><td>测试清单第二批-2024-17-47.json.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\测试清单第二批-2024-17-47.json.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>测试绕过成功.xlsx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\测试绕过成功.xlsx.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>渗透测试常见漏洞分析及技术过程讲解 .md.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\渗透测试常见漏洞分析及技术过程讲解 .md.lnk</td><td>2025-01-02 11:49:34</td></tr><tr><td>渗透测试常见漏洞分析及技术过程讲解 .pdf.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\渗透测试常见漏洞分析及技术过程讲解 .pdf.lnk</td><td>2025-01-02 11:49:34</td></tr><tr><td>渗透测试常见漏洞分析及技术过程讲解20241203.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\渗透测试常见漏洞分析及技术过程讲解20241203.lnk</td><td>2025-01-02 11:49:34</td></tr><tr><td>渗透测试常见漏洞分析及技术过程讲解20241203.pptx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\渗透测试常见漏洞分析及技术过程讲解20241203.pptx.lnk</td><td>2025-01-02 11:49:34</td></tr><tr><td>第三批测试.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\第三批测试.lnk</td><td>2025-01-01 20:06:09</td></tr><tr><td>第三批测试.txt.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\第三批测试.txt.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>第二批测试清单.log.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\第二批测试清单.log.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>第二批测试绕过成功.xlsx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\第二批测试绕过成功.xlsx.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>系统信息收集-20250102_152524.pdf.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\系统信息收集-20250102_152524.pdf.lnk</td><td>2025-01-02 15:27:28</td></tr><tr><td>网络安全.png.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\网络安全.png.lnk</td><td>2025-01-02 15:52:23</td></tr><tr><td>网络安全应急响应技术实战指南-(奇安信安服团队) .pdf.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\网络安全应急响应技术实战指南-(奇安信安服团队) .pdf.lnk</td><td>2024-12-31 14:31:31</td></tr><tr><td>网络安全等级保护2.0-基本通用要求-最新版.docx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\网络安全等级保护2.0-基本通用要求-最新版.docx.lnk</td><td>2024-12-31 14:51:57</td></tr><tr><td>网络安全等级保护测评高风险判定指引（2019定稿）.doc.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\网络安全等级保护测评高风险判定指引（2019定稿）.doc.lnk</td><td>2024-12-31 14:52:34</td></tr><tr><td>网络安全题库(汇总1000题).pdf.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\网络安全题库(汇总1000题).pdf.lnk</td><td>2024-12-31 14:21:17</td></tr><tr><td>网络安全风险预警通报-三江购物俱乐部股份有限公司-仑网信办〔2024〕292号.pdf.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\网络安全风险预警通报-三江购物俱乐部股份有限公司-仑网信办〔2024〕292号.pdf.lnk</td><td>2025-01-02 09:24:01</td></tr><tr><td>能力评估笔试卷初级答案.docx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\能力评估笔试卷初级答案.docx.lnk</td><td>2025-01-02 11:49:34</td></tr><tr><td>路径限制l测试.txt.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\路径限制l测试.txt.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>路径限制测试20250101.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\路径限制测试20250101.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>路径限制测试清单.txt.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\路径限制测试清单.txt.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>软件供应链安全相关资料 (2).lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\软件供应链安全相关资料 (2).lnk</td><td>2025-01-02 11:49:34</td></tr><tr><td>银狐分析.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\银狐分析.lnk</td><td>2024-12-25 14:49:08</td></tr><tr><td>限制url测试.txt.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\限制url测试.txt.lnk</td><td>2025-01-02 09:15:44</td></tr><tr><td>需要限制条件.txt.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\需要限制条件.txt.lnk</td><td>2025-01-01 20:11:42</td></tr><tr><td>需限制.txt.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\需限制.txt.lnk</td><td>2025-01-01 20:11:56</td></tr><tr><td>需限制清单.txt.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\需限制清单.txt.lnk</td><td>2025-01-01 20:12:05</td></tr><tr><td>面向攻击溯源的日志处理技术.pdf.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\面向攻击溯源的日志处理技术.pdf.lnk</td><td>2025-01-02 16:09:44</td></tr><tr><td>项目四组.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\项目四组.lnk</td><td>2025-01-02 14:37:42</td></tr><tr><td>项目四组漏洞修复记录追踪表.xlsx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\项目四组漏洞修复记录追踪表.xlsx.lnk</td><td>2025-01-02 14:37:42</td></tr><tr><td>项目组提供指标佐证-20250102.xlsx.lnk</td><td>C:\Users\Administrator\AppData\Roaming\Microsoft\Windows\Recent\项目组提供指标佐证-20250102.xlsx.lnk</td><td>2025-01-02 09:41:47</td></tr></table></div><div id='network_adapters' class='section'><h2>网络适配器</h2><table><tr><th>适配器名称</th><th>IP 地址</th><th>子网掩码</th><th>MAC 地址</th></tr><tr><td>以太网 4</td><td>192.168.0.104</td><td>255.255.255.0</td><td>00-E0-4C-16-72-30</td></tr><tr><td>本地连接* 1</td><td>169.254.44.8</td><td>255.255.0.0</td><td>CA-8A-D8-4B-BE-C4</td></tr><tr><td>本地连接* 2</td><td>192.168.137.1</td><td>255.255.255.0</td><td>EA-8A-D8-4B-BE-C4</td></tr><tr><td>VMware Network Adapter VMnet1</td><td>192.168.10.1</td><td>255.255.255.0</td><td>00-50-56-C0-00-01</td></tr><tr><td>VMware Network Adapter VMnet2</td><td>3.3.3.1</td><td>255.255.255.0</td><td>00-50-56-C0-00-02</td></tr><tr><td>VMware Network Adapter VMnet8</td><td>192.168.80.1</td><td>255.255.255.0</td><td>00-50-56-C0-00-08</td></tr><tr><td>以太网 2</td><td>169.254.207.218</td><td>255.255.0.0</td><td>00-FF-05-78-57-17</td></tr><tr><td>VMware Network Adapter VMnet5</td><td>192.168.51.1</td><td>255.255.255.0</td><td>00-50-56-C0-00-05</td></tr><tr><td>WLAN</td><td>169.254.160.57</td><td>255.255.0.0</td><td>C8-8A-D8-4B-BE-C4</td></tr><tr><td>蓝牙网络连接</td><td>169.254.219.26</td><td>255.255.0.0</td><td>C8-8A-D8-4B-BE-C5</td></tr><tr><td>Loopback Pseudo-Interface 1</td><td>127.0.0.1</td><td>255.0.0.0</td><td>None</td></tr></table></div>
        </div></div>
        </body>
    </html>
    